}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:40:16 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) 14:40:16 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, 0x0, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) [ 1085.083323] FAULT_INJECTION: forcing a failure. [ 1085.083323] name failslab, interval 1, probability 0, space 0, times 0 [ 1085.086815] CPU: 0 PID: 7085 Comm: syz-executor.6 Not tainted 5.10.229 #1 [ 1085.088817] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1085.091222] Call Trace: [ 1085.091980] dump_stack+0x107/0x167 14:40:16 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, 0x0, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) [ 1085.093032] should_fail.cold+0x5/0xa [ 1085.094470] ? create_object.isra.0+0x3a/0xa20 [ 1085.095941] should_failslab+0x5/0x20 [ 1085.097167] kmem_cache_alloc+0x5b/0x310 [ 1085.098461] ? mark_held_locks+0x9e/0xe0 [ 1085.099785] create_object.isra.0+0x3a/0xa20 [ 1085.101187] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1085.102831] kmem_cache_alloc+0x159/0x310 [ 1085.104175] xas_alloc+0x336/0x440 [ 1085.105318] xas_create+0x34a/0x10d0 [ 1085.106510] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1085.108224] xas_store+0x8c/0x1c40 [ 1085.109384] __xa_store+0x164/0x2d0 [ 1085.110555] ? xa_delete_node+0x280/0x280 [ 1085.111899] ? trace_hardirqs_on+0x5b/0x180 [ 1085.113312] xa_store+0x31/0x50 [ 1085.114365] __io_uring_add_tctx_node+0x1cf/0x520 [ 1085.115925] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1085.117591] ? alloc_fd+0x2e7/0x670 [ 1085.118768] io_uring_setup+0x1fbb/0x2980 [ 1085.120122] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1085.121752] ? wait_for_completion_io+0x270/0x270 [ 1085.123333] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1085.125020] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1085.126688] do_syscall_64+0x33/0x40 [ 1085.127893] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1085.129537] RIP: 0033:0x7f13c0819b19 [ 1085.130738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1085.140093] RSP: 002b:00007f13bdd8f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1085.141037] RAX: ffffffffffffffda RBX: 00007f13c092cf60 RCX: 00007f13c0819b19 [ 1085.141918] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000004d4f [ 1085.142805] RBP: 0000000020000080 R08: 00000000200001c0 R09: 00000000200001c0 [ 1085.143724] R10: 0000000020000040 R11: 0000000000000202 R12: 00000000200001c0 [ 1085.144613] R13: 0000000020ffc000 R14: 0000000020000040 R15: 00000000200a0000 14:40:16 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:40:16 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) 14:40:16 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, 0x0, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:40:16 executing program 0: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x46010000) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:40:16 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) 14:40:16 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:40:31 executing program 4: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x6, 0x0) semctl$GETZCNT(r0, 0x741ad5bdf2b7fe62, 0xf, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x4, 0x4, 0x1000}, {0x2, 0x1f, 0x800}, {0x1, 0xfff, 0x1800}], 0x3, &(0x7f0000000040)={0x77359400}) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:40:31 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:40:31 executing program 7: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:40:31 executing program 0: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) r0 = semget(0x0, 0x3, 0x80) semctl$SEM_INFO(r0, 0x2, 0x13, &(0x7f0000000180)=""/86) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000640)={{0x3, r1, r2, r3, 0xee01, 0x13, 0x1f}, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x80}) 14:40:31 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:40:31 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) (fail_nth: 70) 14:40:31 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) 14:40:31 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) [ 1099.923335] FAULT_INJECTION: forcing a failure. [ 1099.923335] name failslab, interval 1, probability 0, space 0, times 0 [ 1099.924796] CPU: 0 PID: 7133 Comm: syz-executor.6 Not tainted 5.10.229 #1 [ 1099.925632] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1099.926647] Call Trace: [ 1099.926984] dump_stack+0x107/0x167 [ 1099.927440] should_fail.cold+0x5/0xa [ 1099.927917] ? xas_alloc+0x336/0x440 [ 1099.928399] should_failslab+0x5/0x20 [ 1099.928871] kmem_cache_alloc+0x5b/0x310 [ 1099.929379] xas_alloc+0x336/0x440 [ 1099.929822] xas_create+0x34a/0x10d0 [ 1099.930297] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1099.930945] xas_store+0x8c/0x1c40 [ 1099.931410] __xa_store+0x164/0x2d0 [ 1099.931867] ? xa_delete_node+0x280/0x280 [ 1099.932407] ? trace_hardirqs_on+0x5b/0x180 [ 1099.932958] xa_store+0x31/0x50 [ 1099.933372] __io_uring_add_tctx_node+0x1cf/0x520 [ 1099.933967] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1099.934607] ? alloc_fd+0x2e7/0x670 [ 1099.935075] io_uring_setup+0x1fbb/0x2980 [ 1099.935601] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1099.936246] ? wait_for_completion_io+0x270/0x270 [ 1099.936874] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1099.937517] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1099.938156] do_syscall_64+0x33/0x40 [ 1099.938616] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1099.939244] RIP: 0033:0x7f13c0819b19 [ 1099.939707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1099.941950] RSP: 002b:00007f13bdd8f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1099.942880] RAX: ffffffffffffffda RBX: 00007f13c092cf60 RCX: 00007f13c0819b19 [ 1099.943753] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000004d4f [ 1099.944639] RBP: 0000000020000080 R08: 00000000200001c0 R09: 00000000200001c0 [ 1099.945513] R10: 0000000020000040 R11: 0000000000000202 R12: 00000000200001c0 [ 1099.946382] R13: 0000000020ffc000 R14: 0000000020000040 R15: 00000000200a0000 14:40:31 executing program 7: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$setown(r1, 0x8, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000000)=0x3db) 14:40:31 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) 14:40:31 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:40:31 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:40:31 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) (fail_nth: 71) 14:40:31 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) [ 1100.117050] FAULT_INJECTION: forcing a failure. [ 1100.117050] name failslab, interval 1, probability 0, space 0, times 0 [ 1100.118493] CPU: 0 PID: 7157 Comm: syz-executor.6 Not tainted 5.10.229 #1 [ 1100.119320] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1100.120345] Call Trace: [ 1100.120677] dump_stack+0x107/0x167 [ 1100.121133] should_fail.cold+0x5/0xa [ 1100.121608] ? create_object.isra.0+0x3a/0xa20 [ 1100.122181] should_failslab+0x5/0x20 [ 1100.122651] kmem_cache_alloc+0x5b/0x310 [ 1100.123153] ? mark_held_locks+0x9e/0xe0 [ 1100.123663] create_object.isra.0+0x3a/0xa20 [ 1100.124218] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1100.124854] kmem_cache_alloc+0x159/0x310 [ 1100.125383] xas_alloc+0x336/0x440 [ 1100.125829] xas_create+0x34a/0x10d0 [ 1100.126306] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1100.126956] xas_store+0x8c/0x1c40 [ 1100.127422] __xa_store+0x164/0x2d0 [ 1100.127878] ? xa_delete_node+0x280/0x280 [ 1100.128437] ? trace_hardirqs_on+0x5b/0x180 [ 1100.128985] xa_store+0x31/0x50 [ 1100.129400] __io_uring_add_tctx_node+0x1cf/0x520 [ 1100.129994] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1100.130635] ? alloc_fd+0x2e7/0x670 [ 1100.131104] io_uring_setup+0x1fbb/0x2980 [ 1100.131628] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1100.132274] ? wait_for_completion_io+0x270/0x270 [ 1100.132894] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1100.133531] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1100.134164] do_syscall_64+0x33/0x40 [ 1100.134620] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1100.135248] RIP: 0033:0x7f13c0819b19 [ 1100.135710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1100.137956] RSP: 002b:00007f13bdd8f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1100.138887] RAX: ffffffffffffffda RBX: 00007f13c092cf60 RCX: 00007f13c0819b19 [ 1100.139755] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000004d4f [ 1100.140639] RBP: 0000000020000080 R08: 00000000200001c0 R09: 00000000200001c0 [ 1100.141514] R10: 0000000020000040 R11: 0000000000000202 R12: 00000000200001c0 [ 1100.142384] R13: 0000000020ffc000 R14: 0000000020000040 R15: 00000000200a0000 14:40:44 executing program 7: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) unshare(0x20060000) ioctl$FITRIM(r0, 0xc020662a, &(0x7f0000000080)={0x0, 0xfff7fffffffffff7}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, 0x0) getdents64(r0, &(0x7f0000000000)=""/6, 0x6) semctl$IPC_RMID(0x0, 0x0, 0x10) [ 1112.879028] FAULT_INJECTION: forcing a failure. [ 1112.879028] name failslab, interval 1, probability 0, space 0, times 0 [ 1112.880542] CPU: 0 PID: 7172 Comm: syz-executor.6 Not tainted 5.10.229 #1 [ 1112.881455] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1112.882526] Call Trace: [ 1112.882888] dump_stack+0x107/0x167 [ 1112.883374] should_fail.cold+0x5/0xa [ 1112.883882] ? xas_alloc+0x336/0x440 [ 1112.884383] should_failslab+0x5/0x20 [ 1112.884905] kmem_cache_alloc+0x5b/0x310 [ 1112.885453] xas_alloc+0x336/0x440 [ 1112.885928] xas_create+0x34a/0x10d0 [ 1112.886445] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1112.887145] xas_store+0x8c/0x1c40 [ 1112.887650] __xa_store+0x164/0x2d0 [ 1112.888141] ? xa_delete_node+0x280/0x280 [ 1112.888725] ? trace_hardirqs_on+0x5b/0x180 [ 1112.889323] xa_store+0x31/0x50 [ 1112.889776] __io_uring_add_tctx_node+0x1cf/0x520 [ 1112.890421] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1112.891113] ? alloc_fd+0x2e7/0x670 [ 1112.900762] io_uring_setup+0x1fbb/0x2980 [ 1112.901398] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1112.902141] ? wait_for_completion_io+0x270/0x270 [ 1112.902867] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1112.903603] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1112.904330] do_syscall_64+0x33/0x40 [ 1112.904884] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1112.905603] RIP: 0033:0x7f13c0819b19 [ 1112.906154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1112.908789] RSP: 002b:00007f13bdd8f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1112.909902] RAX: ffffffffffffffda RBX: 00007f13c092cf60 RCX: 00007f13c0819b19 [ 1112.910963] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000004d4f [ 1112.917510] RBP: 0000000020000080 R08: 00000000200001c0 R09: 00000000200001c0 [ 1112.918401] R10: 0000000020000040 R11: 0000000000000202 R12: 00000000200001c0 [ 1112.919323] R13: 0000000020ffc000 R14: 0000000020000040 R15: 00000000200a0000 14:40:44 executing program 4: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) unshare(0x48000000) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:40:44 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) (fail_nth: 72) 14:40:44 executing program 5: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r0 = fork() r1 = open_tree(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x9100) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x204, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x5, 0xc0, 0x81, 0x80, 0x0, 0x4, 0x10400, 0x6, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f0000000280), 0xa}, 0x4000, 0x0, 0x7, 0x5, 0x7fffffff, 0x0, 0x7, 0x0, 0x6, 0x0, 0xd7c}, r0, 0xc, r1, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x5010c, 0x0, 0x0, 0x0, 0x101, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x1}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:40:44 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:40:44 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:40:44 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:40:44 executing program 0: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r0 = semget$private(0x0, 0x6, 0x0) semctl$GETZCNT(r0, 0x741ad5bdf2b7fe62, 0xf, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x5}, {0x2, 0x200}, {0x4, 0x7ff, 0x1000}, {0x2, 0xd48, 0x1000}, {0x3, 0x1ff, 0x1800}, {0x2, 0x240}], 0x6, &(0x7f0000000040)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:40:44 executing program 5: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x6, 0x0) semctl$GETZCNT(r0, 0x741ad5bdf2b7fe62, 0xf, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x4, 0x4, 0x1000}, {0x2, 0x1f, 0x800}, {0x1, 0xfff, 0x1800}], 0x3, &(0x7f0000000040)={0x77359400}) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:40:44 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:40:44 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:40:44 executing program 7: unshare(0x8000000) unshare(0x800) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:40:44 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:40:57 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) (fail_nth: 73) 14:40:57 executing program 5: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r0 = fork() r1 = open_tree(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x9100) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x204, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) unshare(0x1a000000) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x5, 0xc0, 0x81, 0x80, 0x0, 0x4, 0x10400, 0x6, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f0000000280), 0xa}, 0x4000, 0x0, 0x7, 0x5, 0x7fffffff, 0x0, 0x7, 0x0, 0x6, 0x0, 0xd7c}, r0, 0xc, r1, 0x1) semget$private(0x0, 0x4, 0x70) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r2, 0x4, 0x2400) fcntl$setstatus(r2, 0x4, 0x0) finit_module(r2, &(0x7f0000000000)='\x00', 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x9, 0x0, 0x0, 0x7, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x82, 0x0, 0x8}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:40:57 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:40:57 executing program 2: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) unshare(0x48000000) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:40:57 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:40:57 executing program 7: unshare(0x8000000) r0 = semget$private(0x0, 0x4000, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x31, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc, 0x0, @perf_bp={0x0}, 0x4200, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000100)='^&-^\xa3:\x00') r2 = semget$private(0x0, 0x3, 0xc0) semop(r2, &(0x7f00000000c0)=[{0x1, 0x2, 0x1800}, {0x0, 0x2, 0x800}, {0x4, 0xc550}, {0x0, 0xfffd, 0x1000}], 0x4) semctl$IPC_RMID(0x0, 0x0, 0x10) r3 = semget$private(0x0, 0x2, 0x20) semop(r3, &(0x7f0000000080)=[{0x3, 0x6, 0x1000}, {0x2, 0xbea}, {0x3, 0x400, 0x2c04a1290ae5bedc}], 0x3) 14:40:57 executing program 4: unshare(0x8000000) unshare(0x2060080) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) unshare(0x2050000) 14:40:57 executing program 0: r0 = semget$private(0x0, 0x4000, 0x0) unshare(0x2000000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x101, 0xe1f}, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xe0, 0x40, 0xc5, 0x5, 0x0, 0x100400000000, 0x1810, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, @perf_config_ext={0x6, 0x2}, 0x801, 0xac8, 0x9, 0x3, 0x5, 0x7fff, 0x6, 0x0, 0x2, 0x0, 0x2}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x7) fstat(r1, &(0x7f0000000600)) semctl$SEM_INFO(r0, 0x1, 0x13, &(0x7f0000000580)=""/92) clone3(&(0x7f0000000380)={0x117f27c2f27701d5, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0, {0x2}, &(0x7f00000001c0)=""/101, 0x65, &(0x7f0000000240)=""/249, &(0x7f0000000340)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) r5 = getpgrp(r4) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000001b80)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x1, 0x3d, 0x8, 0x0, 0x64, 0x4800, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x4}, 0x40000, 0x100, 0xf5b, 0x5, 0x0, 0x4, 0x20, 0x0, 0x1, 0x0, 0x5}, r5, 0x4, r6, 0x2) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x71, 0x5, 0x6f, 0x3, 0x0, 0x800, 0x0, 0x1c55297e2fbe9ed0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x7, 0x5}, 0x480, 0x7ff, 0x5, 0x1, 0x1ec9, 0x9, 0x1, 0x0, 0x3, 0x0, 0x9}, r3, 0xb, 0xffffffffffffffff, 0x1) r7 = semget$private(0x0, 0x6, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000780)={{0x3, 0xee01, 0x0, 0xee01, 0xee01, 0x20, 0x4}, 0x7ff, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffd}) semctl$GETZCNT(r7, 0x741ad5bdf2b7fe62, 0xf, 0x0) semctl$SEM_STAT(r7, 0x0, 0x12, &(0x7f0000000400)=""/216) unshare(0x2000000) semtimedop(r7, &(0x7f0000000000)=[{0x0, 0x6c, 0x800}, {0x0, 0x3, 0x3800}, {0x0, 0x4}, {0x1, 0xb2, 0x800}], 0x3, &(0x7f0000000040)) [ 1126.199498] FAULT_INJECTION: forcing a failure. [ 1126.199498] name failslab, interval 1, probability 0, space 0, times 0 [ 1126.200941] CPU: 1 PID: 7220 Comm: syz-executor.6 Not tainted 5.10.229 #1 [ 1126.201782] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1126.202786] Call Trace: [ 1126.203111] dump_stack+0x107/0x167 [ 1126.203554] should_fail.cold+0x5/0xa [ 1126.204024] ? create_object.isra.0+0x3a/0xa20 [ 1126.204580] should_failslab+0x5/0x20 [ 1126.205062] kmem_cache_alloc+0x5b/0x310 [ 1126.205560] ? mark_held_locks+0x9e/0xe0 [ 1126.206053] create_object.isra.0+0x3a/0xa20 [ 1126.206583] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1126.207201] kmem_cache_alloc+0x159/0x310 [ 1126.207708] xas_alloc+0x336/0x440 [ 1126.208141] xas_create+0x34a/0x10d0 [ 1126.208601] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1126.209254] xas_store+0x8c/0x1c40 [ 1126.209696] __xa_store+0x164/0x2d0 [ 1126.210145] ? xa_delete_node+0x280/0x280 [ 1126.210652] ? trace_hardirqs_on+0x5b/0x180 [ 1126.211177] xa_store+0x31/0x50 [ 1126.211578] __io_uring_add_tctx_node+0x1cf/0x520 [ 1126.212159] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1126.212790] ? alloc_fd+0x2e7/0x670 [ 1126.213258] io_uring_setup+0x1fbb/0x2980 [ 1126.213765] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1126.214378] ? wait_for_completion_io+0x270/0x270 [ 1126.214975] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1126.215609] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1126.216241] do_syscall_64+0x33/0x40 [ 1126.216692] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1126.217325] RIP: 0033:0x7f13c0819b19 [ 1126.217776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1126.219999] RSP: 002b:00007f13bdd8f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1126.220922] RAX: ffffffffffffffda RBX: 00007f13c092cf60 RCX: 00007f13c0819b19 [ 1126.221802] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000004d4f [ 1126.222667] RBP: 0000000020000080 R08: 00000000200001c0 R09: 00000000200001c0 [ 1126.223531] R10: 0000000020000040 R11: 0000000000000202 R12: 00000000200001c0 [ 1126.224393] R13: 0000000020ffc000 R14: 0000000020000040 R15: 00000000200a0000 14:40:57 executing program 0: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20000000) unshare(0x40000) unshare(0x10000000) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:41:10 executing program 7: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x4000000) semctl$IPC_RMID(0x0, 0x0, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$FITRIM(r0, 0xc020662a, &(0x7f0000000080)={0x0, 0xfff7fffffffffff7}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, 0x0) sendmmsg$inet6(r0, &(0x7f00000042c0)=[{{&(0x7f0000000000)={0xa, 0x6, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa31}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000040)="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", 0xfa}, {&(0x7f0000000140)="e867f63bf593c283eb62740df4202802989bcdd6bbe5506be143229be9c0be11e0dfac1c27d19d46a0993ea683b321a741d7f04ac02cbb1e79daa95c475e5e09b96f68b3189e48f0950c1f264886d4126237b627fa78e20ef59a39938dc91e4b5239b128a18ab3aee97e510749acfd3c30505d2823824efcea6c38b9f890b5eb7de1320b4ceb4948e262", 0x8a}], 0x2, &(0x7f0000000240)=[@rthdrdstopts={{0x1f8, 0x29, 0x37, {0x2c, 0x3b, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @generic={0x8, 0xdd, "422530259524680103e89e90bf8cba17489ac9c4b3af0f75d29884f3057ec8727fd85e8880978815221618db8af4c270d5753ebc90e95b353e083ca19bc1a4147720c2d81fe2ae58c94e370f39a6643c136f15de5f4387c4a5c42ac316ee1dc34cc9c928656075882ae6479b933b53bb5c1dd7e315e53bdcac4fb0ae29887aaa0dc63e285fe37d672d9a13f3176cd3ff35d0e30a0403443a08c534be842afa8c6e5bacab406e5dbc4e1a4e5aa83e78840e5ffe5949b117714e5c119a2c5e1aeda3efcdac6e16e47cf6ddd41cc64b695e8ab409ab376c568fe047deba2a"}, @enc_lim={0x4, 0x1, 0x80}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x36}}, @pad1, @generic={0x0, 0x89, "2915291cbd6d64a14cc16db70d304f09c6c3d29cbfb71e7ad60ae2b0cdafe04a9e5bd478f29722b11f0d49baf8b088b343d766920789f67ddfb0222c364c8248ca67bef6e29251e7658ecc4e24b553630385b1e682965066f3450e065951897502a8ca8e667722c47f80cb90003310d4736ee0db982939c6ba337e7b9915b8fc90612bcbca9ace141f"}, @jumbo={0xc2, 0x4, 0xffff87f6}, @calipso={0x7, 0x38, {0x3, 0xc, 0x8, 0x23, [0x5, 0x8001, 0xfffffffffffffff7, 0xc0d0, 0x8, 0x8]}}]}}}, @hoplimit_2292={{0x14}}, @tclass={{0x14}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x16, 0x0, '\x00', [@ra={0x5, 0x2, 0x8}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x10001}}, @rthdr={{0xa8, 0x29, 0x39, {0x1d, 0x12, 0x1, 0x6f, 0x0, [@empty, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @remote, @private0, @local, @local, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2]}}}], 0x308}}, {{&(0x7f0000000580)={0xa, 0x4e23, 0x7, @private1, 0x7}, 0x1c, &(0x7f0000000780)=[{&(0x7f00000005c0)="24d61abba4001cf7b6f2b1a918682f5448c513d5e2c62893848a1cc1923253b3fff817dc41751ea358415401d50953b9a126019116c3d18834367ee6aede04acb32df737ae7f96c8665ac5e7bfe4e841795f8c2eb78e2cb356da21955084a58342e3a624c3d78f090e43dcfbd8f79f3f32f29eb0662742f5081ff51a8376dd66ac576a54aecfe652f8c584", 0x8b}, {&(0x7f0000000680)="f24f01f580b858b200c07c953e0bc07c93222c6bdfe97f41261d80be6683d7b64e60ffbdca5c55fa27d7c370eeea9aea94565e6f971168c163c8dbdbd35e8fa2931c5e9c8f16c9e1733c2704ffdb2cbb4173865a47cc2444a62775b9a2b7950ace8ad5726c11c6f772fda6d59d0ed4fca309f2e16bada4128c10a86aae0c65e3d7bad20291456af77ec6362df1d7c5ca05b3c515f2ecfe637551da20f6a5eba75b70716d5cb92802e3d5b089915dc798dbf07958447b6821a58256e317c98409b27c9f4a4fa856bcc950c117e2782a974a7a490255090e68b059e9a35c6a5fb7439c65d4358d8951a4dd2ec3963fff5e", 0xf0}], 0x2, &(0x7f00000007c0)=[@dstopts_2292={{0x38, 0x29, 0x4, {0x2f, 0x3, '\x00', [@hao={0xc9, 0x10, @local}, @padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0x2}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @hopopts={{0x1020, 0x29, 0x36, {0x6, 0x200, '\x00', [@pad1, @generic={0x0, 0x1000, "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"}]}}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x29, 0x1, '\x00', [@pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x10001}}, @rthdrdstopts={{0x68, 0x29, 0x37, {0x14, 0x9, '\x00', [@ra={0x5, 0x2, 0x401}, @pad1, @pad1, @pad1, @pad1, @calipso={0x7, 0x38, {0x0, 0xc, 0x1b, 0x8, [0xfff, 0x7fffffff, 0xffffffffffff4bbb, 0x0, 0x3ff, 0x100]}}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty}}}, @rthdr={{0x38, 0x29, 0x39, {0x32, 0x4, 0x2, 0x4, 0x0, [@mcast1, @rand_addr=' \x01\x00']}}}], 0x1160}}, {{&(0x7f0000001940)={0xa, 0x4e22, 0x33, @mcast2, 0x3ff}, 0x1c, &(0x7f0000001c80)=[{&(0x7f0000001980)="622650924ff6a370539151ba6c802855b8c9038082b91d26b1a163ca5d781d0a51ce6f9ac15038881eb4d18efd6fb9633b1174b35b81aa9e", 0x38}, {&(0x7f0000001e00)="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", 0x1000}, {&(0x7f00000019c0)="ea4682411ada8f74e0b6958d2b699a8771d5c5c8b398e46330624c66dadb25d0f8e41ece5516642d5c3fe11a3f684516956c4f9c2490ec3a5951227658e0fabbd69d6af7a0444a95ce09ddb3", 0x4c}, {&(0x7f0000001a40)="afc1c00ad64b1aeb90f80f134fc2b9678ea0d46f2d2433dc5e22b7a29e05d2684260ec9df81bb37e7d807a83d9298a60ef24f41ad8d5a29eda4470857021658ed9a23beebca3dc4a5fd0ee38ee8e722ad41b4f15d7effd5c573b0e4f6b9ff53545a0a1299797dd6ad94a2ff86d7b7f7562ed65", 0x73}, {&(0x7f0000001ac0)="d746100f896505bb819806fcc349b903", 0x10}, {&(0x7f0000001b00)="fcfef6e6b7e648cd1b10222d85c986eea38930cb7c307011a8c13996da42dc07bbd685dc701484f1030ac3113411e4d119313887d986d5752ac6ec3716ee18822a1c8e542a07cb1d9f336052b8a755b0c88d813a23a2ac5cda930a3a296f267afaca549290d74553298e84ee5c59be41853a466af295546b570c5038c65ac67fac2aa077df57fd0ca587bd59f5b7a1343defde6cb70b302c9968b60b4e503758", 0xa0}, {&(0x7f0000001bc0)="cddd7b2d6be85552ca75c1af49bdc92528a4773d23b0ef360f3625a96e273ce9b6a0a9178828c28162b2", 0x2a}, {&(0x7f0000001c00)="7777722ad502585ad9f0718ee4b3d3f0b1c808d352afee8eb7012ce68ec6b9f5d53745aca9f10a65fd7cc16797bb6c6037ee38a1ea91ab5383f0be93a9273fc46000b779fb547198196a5b78fa1557f30d52ea43b6520e7def3cac9e9b2a1d0b4a6acfd42f78fd5e6cde69", 0x6b}], 0x8}}, {{&(0x7f0000001d00)={0xa, 0x4e21, 0x4, @empty, 0x7}, 0x1c, &(0x7f0000004240)=[{&(0x7f0000002e00)="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", 0x1000}, {&(0x7f0000003e00)="e032738e5f9f71db30207bf0a9116987018a8415245b0c434f7149419c847d3dc87e5ec3e530bea572d2227508063023c4a64526f40dd8651eb8f8d71f7cda221b0d4158da236e477f40bb568dcc5d0022b7d7e953ce16b918b3f0135118e6315bc8d4b25baa77dfa8c1178150f7aae2b1e65ddca1e969ad3406ad59f0c4d8adc437da8523266ce002b1b0befa1466b64e6d6a38187a33e80d1c2a84759ecf82f6db227982b4ad7a41d1c3ead6aa35bd6b8c630a55e3d430328fc12f14dae29c4076f81c5811a6de14e4f6a570102dbf04d75440d6b7d27d7ce55b", 0xdb}, {&(0x7f0000003f00)="f60434fe6d8c70e3f599d7ae6420eff091246005fe93b8cccc8aaf65b6b99c641ab53fdb5ea1064e4318ca0ea95959bc266cb5b4a4354219e5ce510275c31b8e4601e49aecf766752322c7a52e84e2e156188a36e90c401e8915397d3944da9a24762273c3fa8d143525338ead", 0x6d}, {&(0x7f0000001d40)}, {&(0x7f0000003f80)="d3003724419e2f0c0026578f4e2414204dad11bd3b8e588c740396ef7dc34f2c317c1978e63273a9a3df65a9a50ccaee68635fe7e0ea253438b0f633997f33ae520f9a376e762e8214265ce4461a47d75fda6fe17d79a1fab67bf76b9c6df2c1f93a0d3e956496a70b93cee028d56fd841dc5213c88e3978b4c66fb62356009e6957520123ce57b6e1c7d35a9109bea454141db42df5a6d7d314b4947d6f74f27f6844b6443b9364214985c8d6", 0xad}, {&(0x7f0000004040)="ba72f24a53e76129336341c8609d2109665d689e354c4142c984a5b065a0430194a6c00cfb0f660a0e11088e2822555cc8dcf5f62d8177ec38938a483e36ffa99ae5ea9e6bc9ad1bf3700eb3ac1ce26f", 0x50}, {&(0x7f00000040c0)="3c23f310262a60fefa28a7577321625fd7961ccf5088f0cf69f9d6259fa462d16dca7edecad5b59f1a6dba8bcd8af46249378ca445cc18e76bdac8d170338f576cbf4508dd2c10d0720ebc", 0x4b}, {&(0x7f0000004140)="abe9bea6b5f66e3d6ab32941473cffaf482d3df8369155eac9cc1052cec8bb96ac95b8b6750c58be8de4c68a0b8655351e7e3b7d76c33f250db7338ed01b3779ee7b786e03d009669fc1e8c048572b0e8d2c97e71602c30257895263ff655014f9ebf964be7c64280c1f30fd94a9bab3c5c8d51f8419f1eb62781caafcdd980283b57945146125386ff4b5dd24a51b55d47c77de798b4b65f11376852c5653c9554cd8ecc759255058837bda639704a82e9db76af57812d2ad0c73ce615cbecee77199803bbe1ed083b9ba20945c0c1856a478bd646ed1c54b0c5eaffabac08b9cc84790ed4583f95a9881708545c2b7", 0xf0}], 0x8}}], 0x4, 0x20000000) 14:41:10 executing program 2: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r0 = fork() r1 = open_tree(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x9100) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x204, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) unshare(0x1a000000) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x5, 0xc0, 0x81, 0x80, 0x0, 0x4, 0x10400, 0x6, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f0000000280), 0xa}, 0x4000, 0x0, 0x7, 0x5, 0x7fffffff, 0x0, 0x7, 0x0, 0x6, 0x0, 0xd7c}, r0, 0xc, r1, 0x1) semget$private(0x0, 0x4, 0x70) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r2, 0x4, 0x2400) fcntl$setstatus(r2, 0x4, 0x0) finit_module(r2, &(0x7f0000000000)='\x00', 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x9, 0x0, 0x0, 0x7, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x82, 0x0, 0x8}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:41:10 executing program 5: r0 = semget$private(0x0, 0x4000, 0x0) unshare(0x2000000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x101, 0xe1f}, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xe0, 0x40, 0xc5, 0x5, 0x0, 0x100400000000, 0x1810, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, @perf_config_ext={0x6, 0x2}, 0x801, 0xac8, 0x9, 0x3, 0x5, 0x7fff, 0x6, 0x0, 0x2, 0x0, 0x2}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x7) fstat(r1, &(0x7f0000000600)) semctl$SEM_INFO(r0, 0x1, 0x13, &(0x7f0000000580)=""/92) clone3(&(0x7f0000000380)={0x117f27c2f27701d5, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0, {0x2}, &(0x7f00000001c0)=""/101, 0x65, &(0x7f0000000240)=""/249, &(0x7f0000000340)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) r5 = getpgrp(r4) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000001b80)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x1, 0x3d, 0x8, 0x0, 0x64, 0x4800, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x4}, 0x40000, 0x100, 0xf5b, 0x5, 0x0, 0x4, 0x20, 0x0, 0x1, 0x0, 0x5}, r5, 0x4, r6, 0x2) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x71, 0x5, 0x6f, 0x3, 0x0, 0x800, 0x0, 0x1c55297e2fbe9ed0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x7, 0x5}, 0x480, 0x7ff, 0x5, 0x1, 0x1ec9, 0x9, 0x1, 0x0, 0x3, 0x0, 0x9}, r3, 0xb, 0xffffffffffffffff, 0x1) r7 = semget$private(0x0, 0x6, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000780)={{0x3, 0xee01, 0x0, 0xee01, 0xee01, 0x20, 0x4}, 0x7ff, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffd}) semctl$GETZCNT(r7, 0x741ad5bdf2b7fe62, 0xf, 0x0) semctl$SEM_STAT(r7, 0x0, 0x12, &(0x7f0000000400)=""/216) unshare(0x2000000) semtimedop(r7, &(0x7f0000000000)=[{0x0, 0x6c, 0x800}, {0x0, 0x3, 0x3800}, {0x0, 0x4}, {0x1, 0xb2, 0x800}], 0x3, &(0x7f0000000040)) 14:41:10 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) (fail_nth: 74) 14:41:10 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:41:10 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:41:10 executing program 0: unshare(0x8000000) r0 = semget$private(0x0, 0x4000, 0x0) unshare(0x60040500) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x8, 0x1000}, {0x4, 0x471, 0x800}, {0x2, 0x4, 0x800}, {0x1, 0x2, 0xc00}, {0x0, 0xc2}], 0x5, &(0x7f0000000040)={0x77359400}) 14:41:10 executing program 4: unshare(0x8000000) r0 = semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000080), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x60480) semget(0x3, 0xecb8f52c627d7829, 0x400) semtimedop(r0, &(0x7f0000000000)=[{0x4, 0x6, 0x1000}, {0x2, 0xfffe}, {0x7c94df3005eb2cf7, 0x2, 0x1800}, {0x0, 0x8, 0x1000}], 0x4, &(0x7f0000000040)={0x77359400}) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:41:10 executing program 5: r0 = semget$private(0x0, 0x4000, 0x0) unshare(0x2000000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x101, 0xe1f}, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xe0, 0x40, 0xc5, 0x5, 0x0, 0x100400000000, 0x1810, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, @perf_config_ext={0x6, 0x2}, 0x801, 0xac8, 0x9, 0x3, 0x5, 0x7fff, 0x6, 0x0, 0x2, 0x0, 0x2}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x7) fstat(r1, &(0x7f0000000600)) semctl$SEM_INFO(r0, 0x1, 0x13, &(0x7f0000000580)=""/92) clone3(&(0x7f0000000380)={0x117f27c2f27701d5, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0, {0x2}, &(0x7f00000001c0)=""/101, 0x65, &(0x7f0000000240)=""/249, &(0x7f0000000340)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) r5 = getpgrp(r4) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000001b80)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x9, 0x1, 0x3d, 0x8, 0x0, 0x64, 0x4800, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x4}, 0x40000, 0x100, 0xf5b, 0x5, 0x0, 0x4, 0x20, 0x0, 0x1, 0x0, 0x5}, r5, 0x4, r6, 0x2) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x71, 0x5, 0x6f, 0x3, 0x0, 0x800, 0x0, 0x1c55297e2fbe9ed0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x7, 0x5}, 0x480, 0x7ff, 0x5, 0x1, 0x1ec9, 0x9, 0x1, 0x0, 0x3, 0x0, 0x9}, r3, 0xb, 0xffffffffffffffff, 0x1) r7 = semget$private(0x0, 0x6, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000780)={{0x3, 0xee01, 0x0, 0xee01, 0xee01, 0x20, 0x4}, 0x7ff, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffd}) semctl$GETZCNT(r7, 0x741ad5bdf2b7fe62, 0xf, 0x0) semctl$SEM_STAT(r7, 0x0, 0x12, &(0x7f0000000400)=""/216) unshare(0x2000000) semtimedop(r7, &(0x7f0000000000)=[{0x0, 0x6c, 0x800}, {0x0, 0x3, 0x3800}, {0x0, 0x4}, {0x1, 0xb2, 0x800}], 0x3, &(0x7f0000000040)) [ 1139.418538] FAULT_INJECTION: forcing a failure. [ 1139.418538] name failslab, interval 1, probability 0, space 0, times 0 [ 1139.420157] CPU: 0 PID: 7255 Comm: syz-executor.6 Not tainted 5.10.229 #1 14:41:10 executing program 0: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) unshare(0x30000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) [ 1139.420996] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1139.422139] Call Trace: [ 1139.422466] dump_stack+0x107/0x167 [ 1139.422910] should_fail.cold+0x5/0xa [ 1139.423373] ? xas_alloc+0x336/0x440 [ 1139.423827] should_failslab+0x5/0x20 [ 1139.424288] kmem_cache_alloc+0x5b/0x310 [ 1139.424785] xas_alloc+0x336/0x440 [ 1139.425225] xas_create+0x34a/0x10d0 [ 1139.425813] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1139.426450] xas_store+0x8c/0x1c40 [ 1139.426891] __xa_store+0x164/0x2d0 [ 1139.427333] ? xa_delete_node+0x280/0x280 [ 1139.427841] ? trace_hardirqs_on+0x5b/0x180 [ 1139.428369] xa_store+0x31/0x50 [ 1139.428772] __io_uring_add_tctx_node+0x1cf/0x520 [ 1139.429363] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1139.430127] ? alloc_fd+0x2e7/0x670 [ 1139.430577] io_uring_setup+0x1fbb/0x2980 [ 1139.431085] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1139.431699] ? wait_for_completion_io+0x270/0x270 [ 1139.432300] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1139.432940] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1139.433691] do_syscall_64+0x33/0x40 [ 1139.434143] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1139.434766] RIP: 0033:0x7f13c0819b19 [ 1139.435223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1139.437569] RSP: 002b:00007f13bdd6e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1139.438504] RAX: ffffffffffffffda RBX: 00007f13c092d020 RCX: 00007f13c0819b19 [ 1139.439366] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000004d4f [ 1139.440233] RBP: 0000000020000080 R08: 00000000200001c0 R09: 00000000200001c0 [ 1139.441102] R10: 0000000020000040 R11: 0000000000000202 R12: 00000000200001c0 [ 1139.442090] R13: 0000000020ffc000 R14: 0000000020000040 R15: 00000000200a0000 14:41:11 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:41:11 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:41:11 executing program 2: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r0 = fork() r1 = open_tree(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x9100) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x204, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) unshare(0x1a000000) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x5, 0xc0, 0x81, 0x80, 0x0, 0x4, 0x10400, 0x6, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f0000000280), 0xa}, 0x4000, 0x0, 0x7, 0x5, 0x7fffffff, 0x0, 0x7, 0x0, 0x6, 0x0, 0xd7c}, r0, 0xc, r1, 0x1) semget$private(0x0, 0x4, 0x70) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r2, 0x4, 0x2400) fcntl$setstatus(r2, 0x4, 0x0) finit_module(r2, &(0x7f0000000000)='\x00', 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x9, 0x0, 0x0, 0x7, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x82, 0x0, 0x8}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:41:11 executing program 7: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}, 0x0, 0x100000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x109100, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x80, 0x7f, 0x3f, 0xff, 0xe3, 0x0, 0x9, 0x48100, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x1b618017, 0x40}, 0x100, 0x1ff, 0x0, 0x5, 0x20, 0x8054, 0x2, 0x0, 0x6, 0x0, 0x1e}, r1, 0xd, r0, 0x0) unshare(0x10a80) 14:41:11 executing program 5: unshare(0x8000000) r0 = semget$private(0x0, 0x4000, 0x0) unshare(0x60040500) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x8, 0x1000}, {0x4, 0x471, 0x800}, {0x2, 0x4, 0x800}, {0x1, 0x2, 0xc00}, {0x0, 0xc2}], 0x5, &(0x7f0000000040)={0x77359400}) 14:41:11 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) (fail_nth: 75) 14:41:11 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:41:11 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) [ 1139.641148] FAULT_INJECTION: forcing a failure. [ 1139.641148] name failslab, interval 1, probability 0, space 0, times 0 [ 1139.642648] CPU: 0 PID: 7280 Comm: syz-executor.6 Not tainted 5.10.229 #1 [ 1139.643520] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1139.644582] Call Trace: [ 1139.644933] dump_stack+0x107/0x167 [ 1139.645413] should_fail.cold+0x5/0xa [ 1139.649928] ? xas_alloc+0x336/0x440 [ 1139.650408] should_failslab+0x5/0x20 [ 1139.650894] kmem_cache_alloc+0x5b/0x310 [ 1139.651427] xas_alloc+0x336/0x440 [ 1139.651892] xas_create+0x34a/0x10d0 [ 1139.652390] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1139.653065] xas_store+0x8c/0x1c40 [ 1139.653562] __xa_store+0x164/0x2d0 [ 1139.654042] ? xa_delete_node+0x280/0x280 [ 1139.654587] ? trace_hardirqs_on+0x5b/0x180 [ 1139.655154] xa_store+0x31/0x50 [ 1139.655589] __io_uring_add_tctx_node+0x1cf/0x520 [ 1139.656205] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1139.656874] ? alloc_fd+0x2e7/0x670 [ 1139.657361] io_uring_setup+0x1fbb/0x2980 [ 1139.657928] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1139.658573] ? wait_for_completion_io+0x270/0x270 [ 1139.659226] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1139.659887] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1139.660553] do_syscall_64+0x33/0x40 [ 1139.661033] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1139.661701] RIP: 0033:0x7f13c0819b19 [ 1139.662183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1139.664454] RSP: 002b:00007f13bdd8f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1139.665411] RAX: ffffffffffffffda RBX: 00007f13c092cf60 RCX: 00007f13c0819b19 [ 1139.666326] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000004d4f [ 1139.667228] RBP: 0000000020000080 R08: 00000000200001c0 R09: 00000000200001c0 [ 1139.668126] R10: 0000000020000040 R11: 0000000000000202 R12: 00000000200001c0 [ 1139.669025] R13: 0000000020ffc000 R14: 0000000020000040 R15: 00000000200a0000 14:41:11 executing program 7: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x8d, 0x20, 0x81, 0xfa, 0x0, 0x6, 0xa00, 0xe, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x272, 0x0, @perf_config_ext={0x7cfaa3a9, 0x3}, 0x0, 0x4fa6, 0x2, 0x0, 0x6e7d6460, 0x4, 0x142, 0x0, 0x878, 0x0, 0x80000001}, r0, 0x4, 0xffffffffffffffff, 0x1) unshare(0x0) 14:41:11 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:41:24 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) 14:41:24 executing program 4: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:41:24 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:41:24 executing program 7: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x240944, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r1, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x20040040) unshare(0x8000000) unshare(0x2030000) semget$private(0x0, 0x4000, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000200)={{r0}, 0x7, &(0x7f00000001c0)=[0x1, 0x84c, 0x7f, 0x6, 0x100000000, 0x1, 0x1ea3], 0x7fff, 0x4, [0x7, 0x401, 0x2]}) r2 = semget$private(0x0, 0x6, 0x0) semctl$GETZCNT(r2, 0x741ad5bdf2b7fe62, 0xf, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:41:24 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r2}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r2, 0x3400000000000000, 0x20, 0x1}) 14:41:24 executing program 0: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x6, 0x0) semctl$GETZCNT(r0, 0x741ad5bdf2b7fe62, 0xf, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semctl$GETZCNT(r1, 0x741ad5bdf2b7fe62, 0xf, 0x0) semtimedop(r1, &(0x7f0000000000)=[{0x6, 0x40, 0x1000}, {0x0, 0x0, 0x1800}, {0x0, 0x8a5}, {0x4, 0x1}, {0x3, 0x8, 0x800}, {0x1, 0x20}, {0x2, 0xfffd, 0x1000}, {0x1, 0x2}, {0x0, 0x4, 0x1000}], 0x9, &(0x7f0000000040)) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:41:24 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) (fail_nth: 76) 14:41:24 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) [ 1153.317489] FAULT_INJECTION: forcing a failure. [ 1153.317489] name failslab, interval 1, probability 0, space 0, times 0 [ 1153.319062] CPU: 1 PID: 7314 Comm: syz-executor.6 Not tainted 5.10.229 #1 [ 1153.319885] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1153.320886] Call Trace: [ 1153.321211] dump_stack+0x107/0x167 [ 1153.321653] should_fail.cold+0x5/0xa [ 1153.322151] ? xas_alloc+0x336/0x440 [ 1153.322609] should_failslab+0x5/0x20 [ 1153.323071] kmem_cache_alloc+0x5b/0x310 [ 1153.323565] xas_alloc+0x336/0x440 [ 1153.323997] xas_create+0x34a/0x10d0 [ 1153.324457] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1153.325094] xas_store+0x8c/0x1c40 [ 1153.325534] __xa_store+0x164/0x2d0 [ 1153.326003] ? xa_delete_node+0x280/0x280 [ 1153.326532] ? trace_hardirqs_on+0x5b/0x180 [ 1153.327072] xa_store+0x31/0x50 [ 1153.327483] __io_uring_add_tctx_node+0x1cf/0x520 [ 1153.328076] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1153.328723] ? alloc_fd+0x2e7/0x670 [ 1153.329184] io_uring_setup+0x1fbb/0x2980 [ 1153.329702] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1153.330432] ? wait_for_completion_io+0x270/0x270 [ 1153.331041] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1153.331678] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1153.332308] do_syscall_64+0x33/0x40 [ 1153.332762] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1153.333383] RIP: 0033:0x7f13c0819b19 [ 1153.333845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1153.336108] RSP: 002b:00007f13bdd8f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1153.337028] RAX: ffffffffffffffda RBX: 00007f13c092cf60 RCX: 00007f13c0819b19 [ 1153.337892] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000004d4f [ 1153.338781] RBP: 0000000020000080 R08: 00000000200001c0 R09: 00000000200001c0 [ 1153.339654] R10: 0000000020000040 R11: 0000000000000202 R12: 00000000200001c0 [ 1153.340518] R13: 0000000020ffc000 R14: 0000000020000040 R15: 00000000200a0000 14:41:24 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={0x0, 0x3400000000000000, 0x20, 0x1}) 14:41:24 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:41:24 executing program 7: r0 = semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x7, 0xffffffffffffffff, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x20, 0x0, 0x2, 0x0]) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:41:24 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:41:25 executing program 2: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x6, 0x0) semctl$GETZCNT(r0, 0x741ad5bdf2b7fe62, 0xf, 0x0) semctl$SEM_INFO(r0, 0x2, 0x13, &(0x7f0000000080)=""/108) semctl$IPC_RMID(0x0, 0x0, 0x10) r1 = semget(0x3, 0x4, 0x301) semop(r1, &(0x7f0000000040)=[{0x1, 0x4ff, 0x800}, {0x0, 0xa52, 0x1800}, {0x2, 0x8, 0x1800}, {0x4, 0x8001, 0x800}, {0x1, 0x5, 0x2000}, {0x0, 0x3, 0x1000}], 0x6) r2 = semget(0x1, 0x7, 0x0) semop(r2, &(0x7f0000000000)=[{0x1, 0x401, 0x1000}, {0x1, 0x81, 0x1800}, {0x3, 0x2, 0xc00}, {0x4, 0x0, 0x2800}, {0x2, 0x67bc, 0x1800}], 0x5) unshare(0x50040000) 14:41:25 executing program 0: unshare(0x8000000) r0 = semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) semctl$IPC_RMID(r0, 0x0, 0x0) 14:41:25 executing program 4: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r0 = semget$private(0x0, 0x6, 0x0) semctl$GETZCNT(r0, 0x741ad5bdf2b7fe62, 0xf, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:41:38 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:41:38 executing program 4: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) unshare(0x20000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x7) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:41:38 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:41:38 executing program 7: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x14000000) 14:41:38 executing program 5: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x6, 0x0) semctl$GETZCNT(r0, 0x741ad5bdf2b7fe62, 0xf, 0x0) semctl$SEM_INFO(r0, 0x2, 0x13, &(0x7f0000000080)=""/108) semctl$IPC_RMID(0x0, 0x0, 0x10) r1 = semget(0x3, 0x4, 0x301) semop(r1, &(0x7f0000000040)=[{0x1, 0x4ff, 0x800}, {0x0, 0xa52, 0x1800}, {0x2, 0x8, 0x1800}, {0x4, 0x8001, 0x800}, {0x1, 0x5, 0x2000}, {0x0, 0x3, 0x1000}], 0x6) r2 = semget(0x1, 0x7, 0x0) semop(r2, &(0x7f0000000000)=[{0x1, 0x401, 0x1000}, {0x1, 0x81, 0x1800}, {0x3, 0x2, 0xc00}, {0x4, 0x0, 0x2800}, {0x2, 0x67bc, 0x1800}], 0x5) unshare(0x50040000) 14:41:38 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) (fail_nth: 77) 14:41:38 executing program 0: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) unshare(0x100) 14:41:38 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r4}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) [ 1166.874603] FAULT_INJECTION: forcing a failure. [ 1166.874603] name failslab, interval 1, probability 0, space 0, times 0 [ 1166.876003] CPU: 0 PID: 7362 Comm: syz-executor.6 Not tainted 5.10.229 #1 [ 1166.876828] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1166.877846] Call Trace: [ 1166.878180] dump_stack+0x107/0x167 [ 1166.878651] should_fail.cold+0x5/0xa [ 1166.879168] ? create_object.isra.0+0x3a/0xa20 [ 1166.879736] should_failslab+0x5/0x20 [ 1166.880209] kmem_cache_alloc+0x5b/0x310 [ 1166.880719] ? mark_held_locks+0x9e/0xe0 [ 1166.881239] create_object.isra.0+0x3a/0xa20 [ 1166.881779] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1166.882442] kmem_cache_alloc+0x159/0x310 [ 1166.882984] xas_alloc+0x336/0x440 [ 1166.883429] xas_create+0x34a/0x10d0 [ 1166.883908] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1166.884562] xas_store+0x8c/0x1c40 [ 1166.885027] __xa_store+0x164/0x2d0 [ 1166.885487] ? xa_delete_node+0x280/0x280 [ 1166.886015] ? trace_hardirqs_on+0x5b/0x180 [ 1166.886589] xa_store+0x31/0x50 [ 1166.887015] __io_uring_add_tctx_node+0x1cf/0x520 [ 1166.887614] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1166.888256] ? alloc_fd+0x2e7/0x670 [ 1166.888733] io_uring_setup+0x1fbb/0x2980 [ 1166.889266] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1166.889889] ? wait_for_completion_io+0x270/0x270 [ 1166.890531] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1166.891191] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1166.891836] do_syscall_64+0x33/0x40 [ 1166.892301] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1166.892930] RIP: 0033:0x7f13c0819b19 [ 1166.893404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1166.895682] RSP: 002b:00007f13bdd8f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1166.896625] RAX: ffffffffffffffda RBX: 00007f13c092cf60 RCX: 00007f13c0819b19 [ 1166.897504] RDX: 0000000020ffc000 RSI: 0000000020000080 RDI: 0000000000004d4f [ 1166.898397] RBP: 0000000020000080 R08: 00000000200001c0 R09: 00000000200001c0 [ 1166.899287] R10: 0000000020000040 R11: 0000000000000202 R12: 00000000200001c0 [ 1166.900157] R13: 0000000020ffc000 R14: 0000000020000040 R15: 00000000200a0000 14:41:38 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:41:38 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r4}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:41:38 executing program 4: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x6f}, 0x0, 0x0, 0x0, 0x0, 0x800001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:41:38 executing program 7: unshare(0x8000000) unshare(0x20000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:41:38 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r3}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r3, 0x3400000000000000, 0x20, 0x1}) 14:41:38 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:41:38 executing program 0: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x6, 0x0) semctl$GETZCNT(r0, 0x741ad5bdf2b7fe62, 0xf, 0x0) semop(r0, &(0x7f0000000000)=[{0x2, 0x7}, {0x3, 0x400, 0x1000}, {0x1, 0x2}, {0x1, 0x0, 0x1800}, {0x0, 0x0, 0x1000}, {0x4, 0x80, 0x1000}, {0x2, 0x0, 0x1000}, {0x2, 0x8, 0x800}, {0x0, 0x5}], 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:41:38 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) (fail_nth: 78) 14:41:38 executing program 4: unshare(0x8000000) r0 = semget$private(0x0, 0x4000, 0x0) semtimedop(r0, &(0x7f00000000c0)=[{0x5, 0x5e, 0x1000}, {0x2, 0xa44c, 0x1800}, {0x2, 0x7fff, 0x1000}, {0x3, 0x7, 0x800}, {0x3, 0x1f, 0x800}], 0x5, &(0x7f0000000100)={0x77359400}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x8000, 0x1800}, {0x3, 0x4, 0x400}, {0x2, 0x9, 0x1000}, {0xb, 0x1, 0x2000}, {0x4, 0x9ac2, 0x1000}], 0x5, &(0x7f0000000080)={r1, r2+10000000}) 14:41:38 executing program 5: unshare(0x8000000) r0 = semget$private(0x0, 0x4000, 0x0) r1 = semget$private(0x0, 0x3, 0x102) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000001c0)=[0xfffc, 0x3, 0x101, 0x8000, 0x20]) r4 = semget$private(0x0, 0x0, 0x5) semtimedop(r4, &(0x7f00000000c0)=[{0x1, 0x5, 0x800}, {0x1, 0x9, 0x1000}, {0x2, 0x0, 0x400}, {0x2, 0x200, 0x1800}, {0x2, 0x100, 0x1000}], 0x5, &(0x7f0000000100)={0x0, 0x3938700}) semtimedop(r1, &(0x7f0000000000)=[{0x2, 0x400, 0x1800}, {0x3, 0x2, 0x1000}, {0x3, 0x8, 0x800}, {0x0, 0x1, 0x1000}, {0x1, 0x3, 0x1000}, {0x3, 0x3, 0x1000}], 0x6, &(0x7f0000000080)={r2, r3+10000000}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x50, 0xffffffffffffffff, 0x0) r5 = semget$private(0x0, 0x4, 0x8) semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000000200)=[0x100, 0x7, 0xe2, 0x0, 0x0]) semtimedop(r4, &(0x7f0000000140)=[{0x2, 0x2}, {0x0, 0x7561, 0x800}, {0x4, 0x8001, 0x1800}, {0x4, 0x8, 0x800}, {0x4, 0xb000, 0x2000}, {0x3}, {0x2, 0x6, 0x1000}, {0x2}, {0x1, 0x2}], 0x9, &(0x7f0000000180)={0x77359400}) unshare(0x4e040000) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:41:38 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) [ 1167.183968] FAULT_INJECTION: forcing a failure. [ 1167.183968] name failslab, interval 1, probability 0, space 0, times 0 [ 1167.185714] CPU: 0 PID: 7396 Comm: syz-executor.6 Not tainted 5.10.229 #1 [ 1167.186583] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1167.187602] Call Trace: [ 1167.187939] dump_stack+0x107/0x167 [ 1167.188397] should_fail.cold+0x5/0xa [ 1167.188874] ? vm_area_dup+0x78/0x290 [ 1167.189354] should_failslab+0x5/0x20 [ 1167.189829] kmem_cache_alloc+0x5b/0x310 [ 1167.190343] vm_area_dup+0x78/0x290 [ 1167.190838] ? mark_lock+0xf5/0x2df0 [ 1167.191303] ? perf_tp_event+0x5ce/0xc00 [ 1167.191814] ? lock_chain_count+0x20/0x20 [ 1167.192337] ? perf_event_switch_output+0x7d0/0x7d0 [ 1167.192960] ? lock_chain_count+0x20/0x20 [ 1167.193484] ? mark_lock+0xf5/0x2df0 [ 1167.193951] ? vm_area_alloc+0x110/0x110 [ 1167.194472] ? __lock_acquire+0x1657/0x5b00 [ 1167.195039] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1167.195688] ? SOFTIRQ_verbose+0x10/0x10 [ 1167.196199] ? vmacache_find+0x55/0x2a0 [ 1167.196695] __split_vma+0xa8/0x570 [ 1167.197157] __do_munmap+0x365/0x1260 [ 1167.197651] mmap_region+0x776/0x1590 [ 1167.198141] ? get_unmapped_area+0x2f0/0x420 [ 1167.198711] do_mmap+0xcdb/0x11e0 [ 1167.199161] vm_mmap_pgoff+0x198/0x1f0 [ 1167.199654] ? randomize_page+0xb0/0xb0 [ 1167.200175] ksys_mmap_pgoff+0x41c/0x560 [ 1167.200683] ? find_mergeable_anon_vma+0x250/0x250 [ 1167.201298] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1167.201948] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1167.202616] do_syscall_64+0x33/0x40 [ 1167.203080] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1167.203713] RIP: 0033:0x7f13c0819b62 [ 1167.204180] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1167.206437] RSP: 002b:00007f13bdd8f0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1167.207381] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f13c0819b62 [ 1167.208257] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 00000000200a0000 [ 1167.209129] RBP: 00000000200a0000 R08: 0000000000000005 R09: 0000000000000000 [ 1167.210007] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200001c0 [ 1167.210904] R13: 0000000020ffc000 R14: 0000000020000040 R15: 00000000200a0000 14:41:52 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r3}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r3, 0x3400000000000000, 0x20, 0x1}) 14:41:52 executing program 7: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0/file0\x00'}) accept4$bt_l2cap(r1, 0x0, &(0x7f0000000080), 0x80c00) semctl$IPC_RMID(0x0, 0x0, 0x10) ioctl$FIONCLEX(r0, 0x5450) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) 14:41:52 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r3}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r3, 0x3400000000000000, 0x20, 0x1}) 14:41:52 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) (fail_nth: 79) 14:41:52 executing program 0: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x4000400) semctl$IPC_RMID(0x0, 0x0, 0x10) r1 = semget$private(0x0, 0x0, 0x100) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x20, 0x2, 0x0, 0x1, 0x0, 0x7fffffff, 0x100, 0x9, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xa012, 0x4, @perf_config_ext={0x7fffffff, 0x3}, 0x1000, 0x0, 0x3f, 0x5, 0x8000, 0x0, 0xffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xb, r0, 0x9) semop(r1, &(0x7f0000000000)=[{0x3, 0x4, 0x800}, {0x4, 0x7, 0x1000}, {0x3, 0x1, 0x1000}, {0x4, 0x568, 0x1800}, {0x3, 0xca}, {0x4, 0x101, 0x1000}, {0x2, 0x86b2, 0x1000}], 0x7) 14:41:52 executing program 4: unshare(0x28050400) unshare(0x22000000) r0 = semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) unshare(0x40000000) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x81, 0x7, 0x33, 0x0, 0xc0000000, 0x4000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0xfff}, 0x80, 0xfffffffffffffffe, 0x48, 0x5, 0x2, 0x2, 0x3ff, 0x0, 0xffff8001, 0x0, 0x8}, 0xffffffffffffffff, 0x2, r1, 0x8) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:41:52 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:41:52 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) [ 1180.619043] FAULT_INJECTION: forcing a failure. [ 1180.619043] name failslab, interval 1, probability 0, space 0, times 0 [ 1180.620535] CPU: 1 PID: 7417 Comm: syz-executor.6 Not tainted 5.10.229 #1 [ 1180.621392] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1180.622424] Call Trace: [ 1180.622761] dump_stack+0x107/0x167 [ 1180.623224] should_fail.cold+0x5/0xa [ 1180.623697] ? create_object.isra.0+0x3a/0xa20 [ 1180.624280] should_failslab+0x5/0x20 [ 1180.624754] kmem_cache_alloc+0x5b/0x310 [ 1180.625266] create_object.isra.0+0x3a/0xa20 [ 1180.625813] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1180.626450] kmem_cache_alloc+0x159/0x310 [ 1180.626971] vm_area_dup+0x78/0x290 [ 1180.627422] ? lock_release+0x680/0x680 [ 1180.627912] ? mark_lock+0xf5/0x2df0 [ 1180.628370] ? lock_chain_count+0x20/0x20 [ 1180.628879] ? mark_lock+0xf5/0x2df0 [ 1180.629337] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1180.629975] ? lock_chain_count+0x20/0x20 [ 1180.630485] ? mark_lock+0xf5/0x2df0 [ 1180.630955] ? vm_area_alloc+0x110/0x110 [ 1180.631464] ? __lock_acquire+0x1657/0x5b00 [ 1180.632012] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1180.632666] ? SOFTIRQ_verbose+0x10/0x10 [ 1180.633168] ? vmacache_find+0x55/0x2a0 [ 1180.633654] __split_vma+0xa8/0x570 [ 1180.634101] __do_munmap+0x365/0x1260 [ 1180.634583] mmap_region+0x776/0x1590 [ 1180.635083] ? get_unmapped_area+0x2f0/0x420 [ 1180.635622] do_mmap+0xcdb/0x11e0 [ 1180.636053] vm_mmap_pgoff+0x198/0x1f0 [ 1180.636531] ? randomize_page+0xb0/0xb0 [ 1180.637028] ksys_mmap_pgoff+0x41c/0x560 [ 1180.637524] ? find_mergeable_anon_vma+0x250/0x250 [ 1180.638136] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1180.638782] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1180.639444] do_syscall_64+0x33/0x40 [ 1180.639907] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1180.640533] RIP: 0033:0x7f13c0819b62 [ 1180.640997] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1180.643268] RSP: 002b:00007f13bdd8f0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1180.644197] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f13c0819b62 [ 1180.645085] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 00000000200a0000 [ 1180.645973] RBP: 00000000200a0000 R08: 0000000000000005 R09: 0000000000000000 [ 1180.646857] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200001c0 [ 1180.647738] R13: 0000000020ffc000 R14: 0000000020000040 R15: 00000000200a0000 14:41:52 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:41:52 executing program 5: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4304}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) [ 1194.933579] FAULT_INJECTION: forcing a failure. [ 1194.933579] name failslab, interval 1, probability 0, space 0, times 0 [ 1194.935026] CPU: 0 PID: 7445 Comm: syz-executor.6 Not tainted 5.10.229 #1 [ 1194.935897] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1194.936926] Call Trace: [ 1194.937264] dump_stack+0x107/0x167 [ 1194.937721] should_fail.cold+0x5/0xa [ 1194.938199] ? anon_vma_clone+0xdc/0x590 [ 1194.938706] should_failslab+0x5/0x20 [ 1194.939179] kmem_cache_alloc+0x5b/0x310 [ 1194.939706] anon_vma_clone+0xdc/0x590 [ 1194.940213] __split_vma+0x17c/0x570 [ 1194.940683] __do_munmap+0x365/0x1260 [ 1194.941178] mmap_region+0x776/0x1590 [ 1194.941669] ? get_unmapped_area+0x2f0/0x420 [ 1194.942219] do_mmap+0xcdb/0x11e0 [ 1194.942666] vm_mmap_pgoff+0x198/0x1f0 [ 1194.943171] ? randomize_page+0xb0/0xb0 [ 1194.943706] ksys_mmap_pgoff+0x41c/0x560 [ 1194.944222] ? find_mergeable_anon_vma+0x250/0x250 [ 1194.944840] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1194.945497] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1194.946148] do_syscall_64+0x33/0x40 [ 1194.946615] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1194.947258] RIP: 0033:0x7f13c0819b62 [ 1194.951754] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1194.954000] RSP: 002b:00007f13bdd8f0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1194.954937] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f13c0819b62 [ 1194.955844] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 00000000200a0000 [ 1194.956730] RBP: 00000000200a0000 R08: 0000000000000005 R09: 0000000000000000 [ 1194.957623] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200001c0 [ 1194.958516] R13: 0000000020ffc000 R14: 0000000020000040 R15: 00000000200a0000 14:42:06 executing program 0: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$setstatus(r0, 0x4, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:42:06 executing program 4: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0) unshare(0x400) 14:42:06 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:42:06 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) (fail_nth: 80) 14:42:06 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:42:06 executing program 7: unshare(0x8000000) semget$private(0x0, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x400) semctl$IPC_RMID(0x0, 0x0, 0x10) r0 = semget$private(0x0, 0x6, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semctl$GETZCNT(r1, 0x741ad5bdf2b7fe62, 0xf, 0x0) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000040)=""/166) semctl$GETZCNT(r0, 0x741ad5bdf2b7fe62, 0xf, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000000)=""/53) 14:42:06 executing program 2: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0/file0\x00'}) accept4$bt_l2cap(r1, 0x0, &(0x7f0000000080), 0x80c00) semctl$IPC_RMID(0x0, 0x0, 0x10) ioctl$FIONCLEX(r0, 0x5450) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) 14:42:06 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:42:06 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:42:06 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:42:06 executing program 0: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000005e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) semctl$IPC_RMID(0x0, 0x0, 0x10) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x440200, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x3f, 0x0, 0x3, 0x3, 0x0, 0x6, 0x9508, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xff, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x40198, 0x10001, 0x7, 0x0, 0x5, 0x2932, 0x4, 0x0, 0x3, 0x0, 0x9}, 0xffffffffffffffff, 0xc, r0, 0xa) 14:42:06 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r2 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) 14:42:06 executing program 7: unshare(0x8000000) unshare(0x8000800) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20000000) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:42:06 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) (fail_nth: 81) 14:42:06 executing program 4: unshare(0x8000000) unshare(0x80200) semget$private(0x0, 0x4000, 0x0) unshare(0x20000200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:42:06 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:42:06 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) [ 1195.203231] FAULT_INJECTION: forcing a failure. [ 1195.203231] name failslab, interval 1, probability 0, space 0, times 0 [ 1195.204770] CPU: 0 PID: 7476 Comm: syz-executor.6 Not tainted 5.10.229 #1 [ 1195.205617] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1195.206633] Call Trace: [ 1195.206971] dump_stack+0x107/0x167 [ 1195.207443] should_fail.cold+0x5/0xa [ 1195.207922] ? create_object.isra.0+0x3a/0xa20 [ 1195.208498] should_failslab+0x5/0x20 [ 1195.208970] kmem_cache_alloc+0x5b/0x310 [ 1195.209485] create_object.isra.0+0x3a/0xa20 [ 1195.210026] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1195.210661] kmem_cache_alloc+0x159/0x310 [ 1195.211196] anon_vma_clone+0xdc/0x590 [ 1195.211720] __split_vma+0x17c/0x570 [ 1195.212190] __do_munmap+0x365/0x1260 [ 1195.212682] mmap_region+0x776/0x1590 [ 1195.213169] ? get_unmapped_area+0x2f0/0x420 [ 1195.213719] do_mmap+0xcdb/0x11e0 [ 1195.214163] vm_mmap_pgoff+0x198/0x1f0 [ 1195.214654] ? randomize_page+0xb0/0xb0 [ 1195.215175] ksys_mmap_pgoff+0x41c/0x560 [ 1195.215700] ? find_mergeable_anon_vma+0x250/0x250 [ 1195.216313] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1195.216959] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1195.217604] do_syscall_64+0x33/0x40 [ 1195.218065] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1195.218702] RIP: 0033:0x7f13c0819b62 [ 1195.219168] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1195.221425] RSP: 002b:00007f13bdd8f0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1195.222361] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f13c0819b62 [ 1195.223236] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 00000000200a0000 [ 1195.224131] RBP: 00000000200a0000 R08: 0000000000000005 R09: 0000000000000000 [ 1195.225003] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200001c0 [ 1195.225880] R13: 0000000020ffc000 R14: 0000000020000040 R15: 00000000200a0000 14:42:06 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:42:06 executing program 2: unshare(0x8000000) semget$private(0x0, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x400) semctl$IPC_RMID(0x0, 0x0, 0x10) r0 = semget$private(0x0, 0x6, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semctl$GETZCNT(r1, 0x741ad5bdf2b7fe62, 0xf, 0x0) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000040)=""/166) semctl$GETZCNT(r0, 0x741ad5bdf2b7fe62, 0xf, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000000)=""/53) 14:42:06 executing program 0: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r0 = fork() recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/45, 0x2d}, {&(0x7f0000000100)=""/30, 0x1e}, {&(0x7f0000000140)=""/221, 0xdd}, {&(0x7f0000000300)=""/79, 0x4f}, {&(0x7f0000000480)=""/196, 0xc4}], 0x5, &(0x7f0000000580)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}}, {{&(0x7f00000006c0)=@abs, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000740)=""/131, 0x83}, {&(0x7f0000000800)=""/4096, 0x1000}], 0x2}}, {{&(0x7f0000001800)=@abs, 0x6e, &(0x7f0000001c00)=[{&(0x7f0000001880)=""/51, 0x33}, {&(0x7f00000018c0)=""/94, 0x5e}, {&(0x7f0000001940)=""/204, 0xcc}, {&(0x7f0000001a40)=""/32, 0x20}, {&(0x7f0000001a80)=""/27, 0x1b}, {&(0x7f0000001ac0)=""/48, 0x30}, {&(0x7f0000001b00)=""/29, 0x1d}, {&(0x7f0000001b40)=""/167, 0xa7}], 0x8, &(0x7f0000001c80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}}, {{&(0x7f0000001e00)=@abs, 0x6e, &(0x7f00000022c0)=[{&(0x7f0000001e80)=""/250, 0xfa}, {&(0x7f0000001f80)=""/186, 0xba}, {&(0x7f0000002040)=""/177, 0xb1}, {&(0x7f0000002100)=""/71, 0x47}, {&(0x7f0000002180)=""/57, 0x39}, {&(0x7f00000021c0)=""/252, 0xfc}], 0x6, &(0x7f0000002340)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000002380), 0x6e, &(0x7f0000003600)=[{&(0x7f0000002400)=""/133, 0x85}, {&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/133, 0x85}, {&(0x7f0000003580)=""/11, 0xb}, {&(0x7f00000035c0)=""/58, 0x3a}], 0x5, &(0x7f0000003680)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000003740)=@abs, 0x6e, &(0x7f0000003d40)=[{&(0x7f00000037c0)=""/73, 0x49}, {&(0x7f0000003840)=""/54, 0x36}, {&(0x7f0000003880)=""/66, 0x42}, {&(0x7f0000003900)=""/231, 0xe7}, {&(0x7f0000003a00)=""/109, 0x6d}, {&(0x7f0000003a80)=""/195, 0xc3}, {&(0x7f0000003b80)=""/128, 0x80}, {&(0x7f0000003c00)=""/183, 0xb7}, {&(0x7f0000003cc0)=""/87, 0x57}], 0x9}}, {{&(0x7f0000003e00)=@abs, 0x6e, &(0x7f0000004400)=[{&(0x7f0000003e80)=""/6, 0x6}, {&(0x7f0000003ec0)=""/83, 0x53}, {&(0x7f0000003f40)=""/3, 0x3}, {&(0x7f0000003f80)=""/51, 0x33}, {&(0x7f0000003fc0)=""/243, 0xf3}, {&(0x7f00000040c0)=""/227, 0xe3}, {&(0x7f00000041c0)=""/163, 0xa3}, {&(0x7f0000004280)=""/78, 0x4e}, {&(0x7f0000004300)=""/248, 0xf8}], 0x9, &(0x7f00000044c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}], 0x7, 0x2, &(0x7f0000004740)) r2 = fork() r3 = open_tree(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x9100) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x204, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r3, 0x0) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x5, 0xc0, 0x81, 0x80, 0x0, 0x4, 0x10400, 0x6, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f0000000280), 0xa}, 0x4000, 0x0, 0x7, 0x5, 0x7fffffff, 0x0, 0x7, 0x0, 0x6, 0x0, 0xd7c}, r2, 0xc, r3, 0x1) getpriority(0x1, r2) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000004780), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xcc, 0x3f, 0x5, 0x5, 0x0, 0x7c66, 0x842, 0xf, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x5, @perf_config_ext={0x8d20, 0x3}, 0x140, 0xfffffffffffffffa, 0xffffffeb, 0x3, 0x7, 0x66, 0x1f, 0x0, 0x0, 0x0, 0x7ff}, r1, 0x6, r4, 0x0) unshare(0x40000200) r5 = open_tree(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x9100) ptrace$getenv(0x4201, r0, 0x5, &(0x7f0000000000)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x204, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r5, 0x0) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x5, 0xc0, 0x81, 0x80, 0x0, 0x4, 0x10400, 0x6, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f0000000280), 0xa}, 0x4000, 0x0, 0x7, 0x5, 0x7fffffff, 0x0, 0x7, 0x0, 0x6, 0x0, 0xd7c}, r0, 0xc, r5, 0x1) perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x100000001, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x2, 0x0, 0x0, 0x0, 0x1000000000000000}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:42:20 executing program 0: unshare(0x8000000) r0 = semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) semop(r0, &(0x7f0000000000)=[{0x0, 0x8001, 0x1800}], 0x1) 14:42:20 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:42:20 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:42:20 executing program 4: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$FITRIM(r1, 0xc020662a, &(0x7f0000000080)={0x0, 0xfff7fffffffffff7}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x80, 0x9, 0x7, 0x37, 0x30, 0x0, 0x4, 0x1020, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x23, 0x4c92}, 0x10002, 0xfff, 0x7f, 0x2, 0x7, 0x2, 0x7b1, 0x0, 0x8, 0x0, 0xc00}, r1, 0x4, r0, 0x9) 14:42:20 executing program 7: unshare(0x8000000) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) unshare(0x10000) 14:42:20 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) (fail_nth: 82) 14:42:20 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:42:20 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) [ 1208.940096] FAULT_INJECTION: forcing a failure. [ 1208.940096] name failslab, interval 1, probability 0, space 0, times 0 [ 1208.944179] CPU: 0 PID: 7517 Comm: syz-executor.6 Not tainted 5.10.229 #1 [ 1208.973481] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1208.976191] Call Trace: [ 1208.977047] dump_stack+0x107/0x167 [ 1208.978212] should_fail.cold+0x5/0xa [ 1208.979465] ? vm_area_dup+0x78/0x290 [ 1208.980704] should_failslab+0x5/0x20 [ 1208.981937] kmem_cache_alloc+0x5b/0x310 [ 1208.983231] ? SOFTIRQ_verbose+0x10/0x10 [ 1208.984557] vm_area_dup+0x78/0x290 [ 1208.985719] ? find_held_lock+0x2c/0x110 [ 1208.987036] ? __vma_adjust+0x612/0x25b0 [ 1208.988347] ? lock_downgrade+0x6d0/0x6d0 [ 1208.989679] ? find_held_lock+0x2c/0x110 [ 1208.991011] ? up_write+0x191/0x550 [ 1208.992207] ? downgrade_write+0x3a0/0x3a0 [ 1208.993561] ? anon_vma_interval_tree_remove+0xb34/0xf30 [ 1208.995311] ? vm_area_alloc+0x110/0x110 [ 1208.996650] ? __vma_adjust+0xc11/0x25b0 [ 1208.997999] ? vmacache_find+0x55/0x2a0 [ 1208.999265] __split_vma+0xa8/0x570 [ 1209.000451] __do_munmap+0xf40/0x1260 [ 1209.001692] mmap_region+0x776/0x1590 [ 1209.002939] ? get_unmapped_area+0x2f0/0x420 [ 1209.004358] do_mmap+0xcdb/0x11e0 [ 1209.005506] vm_mmap_pgoff+0x198/0x1f0 [ 1209.006760] ? randomize_page+0xb0/0xb0 [ 1209.008087] ksys_mmap_pgoff+0x41c/0x560 [ 1209.009388] ? find_mergeable_anon_vma+0x250/0x250 [ 1209.010987] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1209.012682] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1209.014360] do_syscall_64+0x33/0x40 [ 1209.015554] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1209.017227] RIP: 0033:0x7f13c0819b62 [ 1209.018427] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1209.024447] RSP: 002b:00007f13bdd8f0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1209.026909] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f13c0819b62 [ 1209.029227] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 00000000200a0000 [ 1209.031518] RBP: 00000000200a0000 R08: 0000000000000005 R09: 0000000000000000 [ 1209.033844] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200001c0 [ 1209.036152] R13: 0000000020ffc000 R14: 0000000020000040 R15: 00000000200a0000 14:42:20 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:42:20 executing program 2: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r0 = semget$private(0x0, 0x0, 0x20) semctl$IPC_RMID(r0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x110c1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:42:20 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001a00210c4321eb3a000000000a000000087821007f372a93130b1ae772903663c4e7f83df11ed171d5117e1cefe181de67888bed71c6e48749262690a1806768ea983038ecdf95949e72900597e566c5c855", @ANYRES32, @ANYBLOB="0c001d8008000000", @ANYRES32, @ANYBLOB], 0x28}}, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="000e27bd7000fddbdf254a000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000001) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r2, 0x4, 0x2400) fcntl$setstatus(r2, 0x4, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f00000002c0)) unshare(0x40000300) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000840)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000007c0)={0x48, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x6b}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]}, 0x48}}, 0x20000000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000140)) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x408200, 0x0) fcntl$setstatus(r4, 0x4, 0x2400) fcntl$setstatus(r3, 0x4, 0x0) ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000000100)={0x10a, 0x8, &(0x7f00000003c0)}) [ 1209.143045] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.7'. 14:42:20 executing program 4: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r0 = fork() r1 = open_tree(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x9100) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x204, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x5, 0xc0, 0x81, 0x80, 0x0, 0x4, 0x10400, 0x6, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f0000000280), 0xa}, 0x4000, 0x0, 0x7, 0x5, 0x7fffffff, 0x0, 0x7, 0x0, 0x6, 0x0, 0xd7c}, r0, 0xc, r1, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xff, 0x0, 0x9, 0x3, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x40030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8}, r0, 0xa, 0xffffffffffffffff, 0x1) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:42:20 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) [ 1209.196351] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7533 comm=syz-executor.7 [ 1209.246143] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1209.290325] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7533 comm=syz-executor.7 14:42:34 executing program 5: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x6000000) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:42:34 executing program 7: unshare(0x8000000) unshare(0x50000) semget$private(0x0, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) r1 = perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0xc0, 0x3f, 0x7, 0x7, 0x0, 0x200000000009, 0x20cc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8001, 0x0, @perf_config_ext={0x9b, 0xcb}, 0x0, 0x2, 0x800, 0x3, 0x8001, 0x9, 0x401, 0x0, 0x7f, 0x0, 0x8}, 0x0, 0x1, r0, 0xe2abd6eb53fadc8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfd, 0x3, 0x1f, 0x3, 0x0, 0x20, 0x48140, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8001, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x40a2, 0x3f, 0x69c, 0x7, 0x7, 0xc4, 0x3c, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffb}, 0xffffffffffffffff, 0x0, r1, 0x9) 14:42:34 executing program 4: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$FITRIM(r0, 0xc020662a, &(0x7f0000000080)={0x0, 0xfff7fffffffffff7}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7, 0x81, 0x0, 0xca, 0x0, 0x8, 0x6404e, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xcbc, 0x2, @perf_bp={&(0x7f00000000c0), 0x4}, 0x4020, 0x4, 0x7, 0x6, 0x6, 0xa, 0x3f9, 0x0, 0x1, 0x0, 0x40000000001}, 0xffffffffffffffff, 0xa, r0, 0x8) 14:42:34 executing program 0: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = semget(0x0, 0x4, 0x102) unshare(0x12000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in=@loopback, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@private2}}, &(0x7f0000000100)=0xe8) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000140)={{0x3, r1, 0x0, r2, 0xffffffffffffffff, 0x108, 0xffff}, 0xc20c, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x9}) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:42:34 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:42:34 executing program 2: unshare(0x8000000) r0 = semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(r0, &(0x7f0000000000)=[{0x2, 0x5, 0x1000}, {0x0, 0x8, 0x1800}, {0x2, 0xf807, 0x800}, {0x3, 0x7}, {0x2, 0x7}], 0x5) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:42:34 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:42:34 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) (fail_nth: 83) [ 1222.880102] FAULT_INJECTION: forcing a failure. [ 1222.880102] name failslab, interval 1, probability 0, space 0, times 0 [ 1222.883145] CPU: 0 PID: 7567 Comm: syz-executor.6 Not tainted 5.10.229 #1 [ 1222.884918] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1222.886911] Call Trace: [ 1222.887536] dump_stack+0x107/0x167 [ 1222.888433] should_fail.cold+0x5/0xa [ 1222.889365] ? anon_vma_clone+0xdc/0x590 [ 1222.890362] should_failslab+0x5/0x20 [ 1222.891286] kmem_cache_alloc+0x5b/0x310 [ 1222.892284] anon_vma_clone+0xdc/0x590 [ 1222.892829] __split_vma+0x17c/0x570 [ 1222.893312] __do_munmap+0x365/0x1260 [ 1222.893810] mmap_region+0x776/0x1590 [ 1222.894310] ? get_unmapped_area+0x2f0/0x420 [ 1222.894869] do_mmap+0xcdb/0x11e0 [ 1222.895320] vm_mmap_pgoff+0x198/0x1f0 [ 1222.895815] ? randomize_page+0xb0/0xb0 [ 1222.896345] ksys_mmap_pgoff+0x41c/0x560 [ 1222.896909] ? find_mergeable_anon_vma+0x250/0x250 [ 1222.897536] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1222.898192] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1222.898837] do_syscall_64+0x33/0x40 [ 1222.899302] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1222.899933] RIP: 0033:0x7f13c0819b62 [ 1222.900475] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1222.902733] RSP: 002b:00007f13bdd8f0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1222.903681] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f13c0819b62 [ 1222.904921] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 00000000200a0000 [ 1222.906671] RBP: 00000000200a0000 R08: 0000000000000005 R09: 0000000000000000 [ 1222.908421] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200001c0 [ 1222.910106] R13: 0000000020ffc000 R14: 0000000020000040 R15: 00000000200a0000 14:42:34 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r3 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) [ 1223.135098] FAULT_INJECTION: forcing a failure. [ 1223.135098] name failslab, interval 1, probability 0, space 0, times 0 [ 1223.138150] CPU: 0 PID: 7592 Comm: syz-executor.6 Not tainted 5.10.229 #1 [ 1223.139800] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1223.142120] Call Trace: [ 1223.142768] dump_stack+0x107/0x167 [ 1223.143660] should_fail.cold+0x5/0xa [ 1223.144650] ? anon_vma_clone+0xdc/0x590 [ 1223.145627] should_failslab+0x5/0x20 [ 1223.146538] kmem_cache_alloc+0x5b/0x310 [ 1223.147520] anon_vma_clone+0xdc/0x590 [ 1223.148503] __split_vma+0x17c/0x570 [ 1223.149427] __do_munmap+0xf40/0x1260 [ 1223.150383] mmap_region+0x776/0x1590 [ 1223.151342] ? get_unmapped_area+0x2f0/0x420 [ 1223.152451] do_mmap+0xcdb/0x11e0 [ 1223.153293] vm_mmap_pgoff+0x198/0x1f0 [ 1223.168730] ? randomize_page+0xb0/0xb0 [ 1223.169259] ksys_mmap_pgoff+0x41c/0x560 [ 1223.169769] ? find_mergeable_anon_vma+0x250/0x250 [ 1223.170380] ? __x64_sys_mmap+0x23/0x1c0 [ 1223.170901] do_syscall_64+0x33/0x40 [ 1223.171364] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1223.171998] RIP: 0033:0x7f13c0819b62 [ 1223.172505] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1223.174752] RSP: 002b:00007f13bdd8f0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1223.175689] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f13c0819b62 [ 1223.176602] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 00000000200a0000 [ 1223.177474] RBP: 00000000200a0000 R08: 0000000000000005 R09: 0000000000000000 [ 1223.178347] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200001c0 [ 1223.179217] R13: 0000000020ffc000 R14: 0000000020000040 R15: 00000000200a0000 14:42:34 executing program 2: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x6, 0x0) r1 = fork() r2 = open_tree(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x9100) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x204, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r2, 0x0) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x5, 0xc0, 0x81, 0x80, 0x0, 0x4, 0x10400, 0x6, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f0000000280), 0xa}, 0x4000, 0x0, 0x7, 0x5, 0x7fffffff, 0x0, 0x7, 0x0, 0x6, 0x0, 0xd7c}, r1, 0xc, r2, 0x1) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x20, 0x1f, 0x0, 0x5, 0x0, 0x8001, 0x800, 0x76c13611213a775d, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa941, 0x4, @perf_config_ext={0x1a78a0000000000, 0x6}, 0x1, 0x3, 0xfff, 0x3, 0x5, 0x40, 0x0, 0x0, 0x2, 0x0, 0x9}, r1, 0xb, 0xffffffffffffffff, 0x1) semctl$GETZCNT(r0, 0x741ad5bdf2b7fe62, 0xf, 0x0) semctl$IPC_RMID(r0, 0x0, 0x10) 14:42:34 executing program 7: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x9b, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:42:34 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:42:34 executing program 4: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r0 = semget$private(0x0, 0x6, 0x0) semctl$GETZCNT(r0, 0x741ad5bdf2b7fe62, 0xf, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x0, 0x800}, {0x1, 0x7f, 0x1000}, {0x0, 0x401, 0x1000}, {0x1, 0x1, 0x1000}, {0x3, 0x8}, {0x0, 0x100}, {0x4, 0x7, 0x1800}, {0x0, 0x5, 0x3000}, {0x1, 0x80}], 0x9, &(0x7f0000000040)={0x0, 0x3938700}) perf_event_open(&(0x7f0000001d80)={0x4, 0xfffffffffffffd5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) semget$private(0x0, 0x2, 0x3) r1 = semget(0x3, 0x3, 0x1e4) semop(r1, &(0x7f0000000080)=[{0x1, 0xac1f, 0x800}, {0x3, 0x7, 0x800}], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$FITRIM(r2, 0xc020662a, &(0x7f0000000080)={0x0, 0xfff7fffffffffff7}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x4, 0x2, 0x57, 0x0, 0x2, 0x2000, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_bp={&(0x7f00000000c0), 0x6}, 0x42180, 0x8, 0x9, 0x5, 0x4, 0x1, 0x1, 0x0, 0x107, 0x0, 0x4}, 0x0, 0xb, r2, 0x2) 14:42:34 executing program 5: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$FITRIM(r0, 0xc020662a, &(0x7f0000000080)={0x0, 0xfff7fffffffffff7}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7, 0x81, 0x0, 0xca, 0x0, 0x8, 0x6404e, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xcbc, 0x2, @perf_bp={&(0x7f00000000c0), 0x4}, 0x4020, 0x4, 0x7, 0x6, 0x6, 0xa, 0x3f9, 0x0, 0x1, 0x0, 0x40000000001}, 0xffffffffffffffff, 0xa, r0, 0x8) 14:42:34 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) (fail_nth: 84) 14:42:34 executing program 7: mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4, &(0x7f0000000140)={[{@cpuset_v2_mode}, {@clone_children}, {@subsystem='cpuset'}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@obj_role={'obj_role', 0x3d, 'uid<'}}, {@audit}, {@uid_lt={'uid<', 0xee00}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@smackfsfloor={'smackfsfloor', 0x3d, '!+k:-+^$@'}}, {@pcr={'pcr', 0x3d, 0xe}}]}) unshare(0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:42:34 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(0xffffffffffffffff, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r3 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r5}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r5, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r6, 0x40046629, &(0x7f0000000040)) 14:42:48 executing program 2: unshare(0x8000000) r0 = semget$private(0x0, 0x4000, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/129) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) unshare(0x42040200) 14:42:48 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:42:48 executing program 4: unshare(0x2040100) semget$private(0x0, 0x4000, 0x406) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:42:48 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) (fail_nth: 85) 14:42:48 executing program 0: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x3}, 0x410}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x5, 0x61, 0x7f, 0x4, 0x2, 0x3, 0x8000, 0x204, 0x40, 0x280, 0x8001, 0xff7f, 0x38, 0x1, 0x5, 0xcd, 0x27a}, [{0x70000000, 0x9685, 0x9000000000000000, 0xa996, 0x2, 0xd4, 0xb62, 0x5}, {0x1, 0x10001, 0xfffffffffffffffa, 0x6, 0x9, 0x0, 0x6eb8, 0x3}], "4000f191f643f0df7229e331eb5b65afc6660b1cb12a0a100b1110f4114d8e327d3e3d67df3190148521027bf4dca21c6ca0d7728cc21cf105764421fb759553e588555346aa57f6105438a547906de01bc3867cc39483c66aa4b4a28c3c2a4a85a705c7c6bb0fc1144bb4f3fb0053cd1ecfe0ac78508fc35e55cfe59d255ef94c8b80cf8ba1f4491e70e784f97e153fff2bb7161c2e319f36b033b553af780724596b72fe84f0a151b5304ea0311c503d81fa8a327c09bf6d052bd31d85a8f216909d2935a6441901560912219a7b812066", ['\x00', '\x00', '\x00', '\x00']}, 0x582) semctl$IPC_RMID(0x0, 0x0, 0x10) semget$private(0x0, 0x2, 0x384) 14:42:48 executing program 7: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc0, 0xd3a}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:42:48 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:42:48 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) [ 1236.655182] FAULT_INJECTION: forcing a failure. [ 1236.655182] name failslab, interval 1, probability 0, space 0, times 0 [ 1236.656664] CPU: 1 PID: 7611 Comm: syz-executor.6 Not tainted 5.10.229 #1 [ 1236.657558] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1236.658566] Call Trace: [ 1236.658897] dump_stack+0x107/0x167 [ 1236.659347] should_fail.cold+0x5/0xa [ 1236.659822] ? create_object.isra.0+0x3a/0xa20 [ 1236.660381] should_failslab+0x5/0x20 [ 1236.664880] kmem_cache_alloc+0x5b/0x310 [ 1236.665380] create_object.isra.0+0x3a/0xa20 [ 1236.665915] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1236.666544] kmem_cache_alloc+0x159/0x310 [ 1236.667068] anon_vma_clone+0xdc/0x590 [ 1236.667550] __split_vma+0x17c/0x570 [ 1236.668004] __do_munmap+0xf40/0x1260 [ 1236.668473] mmap_region+0x776/0x1590 [ 1236.668960] ? get_unmapped_area+0x2f0/0x420 [ 1236.669494] do_mmap+0xcdb/0x11e0 [ 1236.669923] vm_mmap_pgoff+0x198/0x1f0 [ 1236.670398] ? randomize_page+0xb0/0xb0 [ 1236.670890] ksys_mmap_pgoff+0x41c/0x560 [ 1236.671385] ? find_mergeable_anon_vma+0x250/0x250 [ 1236.671983] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1236.672624] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1236.673268] do_syscall_64+0x33/0x40 [ 1236.673721] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1236.674350] RIP: 0033:0x7f13c0819b62 [ 1236.674804] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1236.677057] RSP: 002b:00007f13bdd8f0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1236.677980] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f13c0819b62 [ 1236.678841] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 00000000200a0000 [ 1236.679703] RBP: 00000000200a0000 R08: 0000000000000005 R09: 0000000000000000 [ 1236.680565] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200001c0 [ 1236.681444] R13: 0000000020ffc000 R14: 0000000020000040 R15: 00000000200a0000 14:42:48 executing program 4: unshare(0x8000000) unshare(0x20020000) unshare(0x200) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x4000000, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:42:48 executing program 7: unshare(0x8000000) unshare(0x0) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x2, 0xdb2d54003a854f58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000, 0x8001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:42:48 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r3}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r3, 0x3400000000000000, 0x20, 0x1}) 14:42:48 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) (fail_nth: 86) 14:42:48 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:42:48 executing program 0: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r0 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x801) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x830c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x1, r0, 0x0) unshare(0x50010700) r1 = semget(0x1, 0x0, 0x119) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000040)=[0x0]) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:42:48 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:42:48 executing program 4: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) unshare(0x10000000) unshare(0x4030400) r0 = semget(0x1, 0x3, 0x420) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x4, 0xfff, 0x800}, {0x3, 0x3f, 0x1000}, {0x2, 0x1, 0x1800}, {0x0, 0x20, 0x1800}, {0x3, 0xe7fc, 0x1000}, {0x4, 0x6, 0xc00}, {0x7, 0xc6, 0x800}, {0x3, 0x9, 0x800}], 0x8, &(0x7f0000000080)={r1, r2+60000000}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) [ 1236.918111] FAULT_INJECTION: forcing a failure. [ 1236.918111] name failslab, interval 1, probability 0, space 0, times 0 [ 1236.919588] CPU: 0 PID: 7642 Comm: syz-executor.6 Not tainted 5.10.229 #1 [ 1236.920429] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1236.921463] Call Trace: [ 1236.921801] dump_stack+0x107/0x167 [ 1236.922264] should_fail.cold+0x5/0xa [ 1236.922745] ? vm_area_alloc+0x1c/0x110 [ 1236.923255] should_failslab+0x5/0x20 [ 1236.923729] kmem_cache_alloc+0x5b/0x310 [ 1236.924250] vm_area_alloc+0x1c/0x110 [ 1236.924723] mmap_region+0x819/0x1590 [ 1236.925229] ? get_unmapped_area+0x2f0/0x420 [ 1236.925781] do_mmap+0xcdb/0x11e0 [ 1236.926230] vm_mmap_pgoff+0x198/0x1f0 [ 1236.926722] ? randomize_page+0xb0/0xb0 [ 1236.927243] ksys_mmap_pgoff+0x41c/0x560 [ 1236.927751] ? find_mergeable_anon_vma+0x250/0x250 [ 1236.928382] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1236.929057] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1236.929702] do_syscall_64+0x33/0x40 [ 1236.930165] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1236.930797] RIP: 0033:0x7f13c0819b62 [ 1236.931266] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1236.933536] RSP: 002b:00007f13bdd8f0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1236.934477] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f13c0819b62 [ 1236.935356] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 00000000200a0000 [ 1236.936234] RBP: 00000000200a0000 R08: 0000000000000005 R09: 0000000000000000 [ 1236.937127] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200001c0 [ 1236.938005] R13: 0000000020ffc000 R14: 0000000020000040 R15: 00000000200a0000 14:43:02 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB="5e1b40436630c44c974740751760304730395400000000005db9247eb29600b66c3a77e76da7a74f3732c53e9eb3eef59b584a305b5c1afa0f1c7b29d5fede8150b6f7fe24906f37d6f2180b52df34422625b48ace3874209b8dd4d6c86750b4f57e"]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:43:02 executing program 0: unshare(0x8000000) semget$private(0x0, 0x0, 0x240) r0 = semget$private(0x0, 0x4000, 0x0) semop(r0, &(0x7f0000000000)=[{0x4, 0x800, 0x800}, {0xe7becffdb5d32821, 0x2, 0x1800}, {0x1, 0x9, 0x1000}], 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xb70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = semget(0x1, 0x3, 0x7c1) semctl$SEM_INFO(r1, 0x2, 0x13, &(0x7f0000000040)=""/37) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:43:02 executing program 7: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000080)=[{0x4, 0xab, 0x1000}, {0x2, 0x0, 0x1400}], 0x2, &(0x7f00000000c0)={0x0, 0x989680}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) r0 = semget$private(0x0, 0x6, 0x0) semctl$GETZCNT(r0, 0x741ad5bdf2b7fe62, 0xf, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xbf, 0x800}, {0x3, 0x1, 0x3000}, {0x4, 0x292, 0x1400}, {0x0, 0xa0, 0x1000}], 0x4, &(0x7f0000000040)) 14:43:02 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:43:02 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:43:02 executing program 2: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r0 = semget(0x1, 0x0, 0x41) semget$private(0x0, 0x0, 0x88) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:43:02 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) (fail_nth: 87) 14:43:02 executing program 4: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) unshare(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = semget(0x3, 0x2, 0x20) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', r2, r3, 0x1000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, '.\x00'}) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xee01, r3, 0xee01, r4, 0x1, 0x1}, 0x0, 0x91b9866, 0x0, 0x0, 0x0, 0x0, 0xdaa}) semctl$IPC_RMID(0x0, 0x0, 0x10) [ 1251.157549] FAULT_INJECTION: forcing a failure. [ 1251.157549] name failslab, interval 1, probability 0, space 0, times 0 [ 1251.159047] CPU: 0 PID: 7670 Comm: syz-executor.6 Not tainted 5.10.229 #1 [ 1251.159895] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1251.160911] Call Trace: [ 1251.161248] dump_stack+0x107/0x167 [ 1251.161727] should_fail.cold+0x5/0xa [ 1251.162205] ? create_object.isra.0+0x3a/0xa20 [ 1251.162783] should_failslab+0x5/0x20 [ 1251.163258] kmem_cache_alloc+0x5b/0x310 [ 1251.163773] create_object.isra.0+0x3a/0xa20 [ 1251.164315] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1251.164954] kmem_cache_alloc+0x159/0x310 [ 1251.165508] vm_area_alloc+0x1c/0x110 [ 1251.165986] mmap_region+0x819/0x1590 [ 1251.166486] ? get_unmapped_area+0x2f0/0x420 [ 1251.167042] do_mmap+0xcdb/0x11e0 [ 1251.167499] vm_mmap_pgoff+0x198/0x1f0 [ 1251.168004] ? randomize_page+0xb0/0xb0 [ 1251.168522] ksys_mmap_pgoff+0x41c/0x560 [ 1251.169030] ? find_mergeable_anon_vma+0x250/0x250 [ 1251.169662] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1251.170314] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1251.170956] do_syscall_64+0x33/0x40 [ 1251.171419] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1251.172051] RIP: 0033:0x7f13c0819b62 [ 1251.172521] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1251.174782] RSP: 002b:00007f13bdd8f0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1251.175719] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f13c0819b62 [ 1251.176593] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 00000000200a0000 [ 1251.177480] RBP: 00000000200a0000 R08: 0000000000000005 R09: 0000000000000000 [ 1251.178357] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200001c0 [ 1251.179232] R13: 0000000020ffc000 R14: 0000000020000040 R15: 00000000200a0000 14:43:02 executing program 7: unshare(0x8000000) r0 = semget$private(0x0, 0x4000, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$GETZCNT(r0, 0x2, 0xf, &(0x7f0000000100)=""/121) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) semctl$SEM_INFO(r0, 0x1, 0x13, &(0x7f0000000000)=""/244) 14:43:02 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r3}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r3, 0x3400000000000000, 0x20, 0x1}) 14:43:02 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) 14:43:02 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:43:02 executing program 0: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$FITRIM(r0, 0xc020662a, &(0x7f0000000080)={0x0, 0xfff7fffffffffff7}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x5, 0x89, 0x1, 0x80, 0x0, 0x1, 0x814a, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x4, @perf_bp={&(0x7f0000000000), 0xa}, 0x21, 0xffffffffffff7fff, 0x8, 0x5, 0x0, 0x9, 0x401, 0x0, 0x0, 0x0, 0x40}, 0xffffffffffffffff, 0x2, r0, 0x0) 14:43:02 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:43:02 executing program 4: unshare(0x18000800) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:43:02 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) (fail_nth: 88) 14:43:02 executing program 5: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) unshare(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = semget(0x3, 0x2, 0x20) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', r2, r3, 0x1000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, '.\x00'}) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000080)={{0x1, 0xee01, r3, 0xee01, r4, 0x1, 0x1}, 0x0, 0x91b9866, 0x0, 0x0, 0x0, 0x0, 0xdaa}) semctl$IPC_RMID(0x0, 0x0, 0x10) [ 1251.383841] FAULT_INJECTION: forcing a failure. [ 1251.383841] name failslab, interval 1, probability 0, space 0, times 0 [ 1251.385315] CPU: 0 PID: 7698 Comm: syz-executor.6 Not tainted 5.10.229 #1 [ 1251.386172] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1251.387206] Call Trace: [ 1251.387542] dump_stack+0x107/0x167 [ 1251.388002] should_fail.cold+0x5/0xa [ 1251.388480] ? create_object.isra.0+0x3a/0xa20 [ 1251.389052] should_failslab+0x5/0x20 [ 1251.389543] kmem_cache_alloc+0x5b/0x310 [ 1251.390060] create_object.isra.0+0x3a/0xa20 [ 1251.390604] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1251.391255] kmem_cache_alloc+0x159/0x310 [ 1251.391783] vm_area_alloc+0x1c/0x110 [ 1251.392257] mmap_region+0x819/0x1590 [ 1251.392748] ? get_unmapped_area+0x2f0/0x420 [ 1251.393321] do_mmap+0xcdb/0x11e0 [ 1251.393784] vm_mmap_pgoff+0x198/0x1f0 [ 1251.394279] ? randomize_page+0xb0/0xb0 [ 1251.394799] ksys_mmap_pgoff+0x41c/0x560 [ 1251.395310] ? find_mergeable_anon_vma+0x250/0x250 [ 1251.395926] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1251.396578] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1251.397227] do_syscall_64+0x33/0x40 [ 1251.397706] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1251.398340] RIP: 0033:0x7f13c0819b62 [ 1251.398806] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1251.401057] RSP: 002b:00007f13bdd8f0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1251.402007] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f13c0819b62 [ 1251.402883] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 00000000200a0000 [ 1251.403759] RBP: 00000000200a0000 R08: 0000000000000005 R09: 0000000000000000 [ 1251.404635] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200001c0 [ 1251.405531] R13: 0000000020ffc000 R14: 0000000020000040 R15: 00000000200a0000 14:43:02 executing program 4: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:43:16 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:43:16 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:43:16 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:43:16 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) (fail_nth: 89) 14:43:16 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:43:16 executing program 0: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) unshare(0xc030000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$FITRIM(r1, 0xc020662a, &(0x7f0000000080)={0x0, 0xfff7fffffffffff7}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x6, 0x20, 0x83, 0x0, 0xffffffffffff0000, 0x1258, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0xfe, 0x400}, 0x80, 0xcdd, 0x3, 0x6, 0x4d, 0x1, 0x2, 0x0, 0xadb7, 0x0, 0x1000}, r0, 0x4, r1, 0x1) semctl$IPC_RMID(0x0, 0x0, 0x10) r2 = semget$private(0x0, 0x6, 0x0) semctl$GETZCNT(r2, 0x741ad5bdf2b7fe62, 0xf, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) 14:43:16 executing program 4: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x6, 0x0) semctl$GETZCNT(r0, 0x741ad5bdf2b7fe62, 0xf, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:43:16 executing program 7: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) r0 = semget$private(0x0, 0x6, 0x0) semctl$GETZCNT(r0, 0x741ad5bdf2b7fe62, 0xf, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) [ 1264.907642] FAULT_INJECTION: forcing a failure. [ 1264.907642] name failslab, interval 1, probability 0, space 0, times 0 [ 1264.909118] CPU: 1 PID: 7724 Comm: syz-executor.6 Not tainted 5.10.229 #1 [ 1264.909982] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1264.910997] Call Trace: [ 1264.911399] dump_stack+0x107/0x167 [ 1264.911847] should_fail.cold+0x5/0xa [ 1264.912319] ? create_object.isra.0+0x3a/0xa20 [ 1264.912885] should_failslab+0x5/0x20 [ 1264.913353] kmem_cache_alloc+0x5b/0x310 [ 1264.913893] create_object.isra.0+0x3a/0xa20 [ 1264.914432] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1264.915064] kmem_cache_alloc+0x159/0x310 [ 1264.915580] vm_area_alloc+0x1c/0x110 [ 1264.916047] mmap_region+0x819/0x1590 [ 1264.916521] ? get_unmapped_area+0x2f0/0x420 [ 1264.917062] do_mmap+0xcdb/0x11e0 [ 1264.917495] vm_mmap_pgoff+0x198/0x1f0 [ 1264.918014] ? randomize_page+0xb0/0xb0 [ 1264.918513] ksys_mmap_pgoff+0x41c/0x560 [ 1264.919012] ? find_mergeable_anon_vma+0x250/0x250 [ 1264.919624] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1264.920280] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1264.920931] do_syscall_64+0x33/0x40 [ 1264.921389] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1264.922063] RIP: 0033:0x7f13c0819b62 [ 1264.922530] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1264.924818] RSP: 002b:00007f13bdd8f0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1264.925787] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f13c0819b62 [ 1264.926703] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 00000000200a0000 [ 1264.927577] RBP: 00000000200a0000 R08: 0000000000000005 R09: 0000000000000000 [ 1264.928458] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200001c0 [ 1264.929351] R13: 0000000020ffc000 R14: 0000000020000040 R15: 00000000200a0000 14:43:16 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:43:16 executing program 4: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x40c842, 0x0) unshare(0x60000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, r0, &(0x7f0000000040)={0x100, 0x187, 0x10}, &(0x7f0000000080)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1f) 14:43:16 executing program 0: unshare(0x8000000) unshare(0xa0000800) r0 = semget$private(0x0, 0x4000, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000a, 0x1010, r2, 0x0) 14:43:16 executing program 7: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:43:16 executing program 2: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) unshare(0xc030000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$FITRIM(r1, 0xc020662a, &(0x7f0000000080)={0x0, 0xfff7fffffffffff7}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x6, 0x20, 0x83, 0x0, 0xffffffffffff0000, 0x1258, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0xfe, 0x400}, 0x80, 0xcdd, 0x3, 0x6, 0x4d, 0x1, 0x2, 0x0, 0xadb7, 0x0, 0x1000}, r0, 0x4, r1, 0x1) semctl$IPC_RMID(0x0, 0x0, 0x10) r2 = semget$private(0x0, 0x6, 0x0) semctl$GETZCNT(r2, 0x741ad5bdf2b7fe62, 0xf, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) 14:43:16 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:43:16 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:43:30 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:43:30 executing program 4: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$FITRIM(r0, 0xc020662a, &(0x7f0000000080)={0x0, 0xfff7fffffffffff7}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x5, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x54ec, 0x259}, 0x4280, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, r0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:43:30 executing program 5: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x6, 0x0) semctl$GETZCNT(r0, 0x741ad5bdf2b7fe62, 0xf, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:43:30 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:43:30 executing program 0: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:43:30 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) (fail_nth: 90) [ 1279.105757] FAULT_INJECTION: forcing a failure. [ 1279.105757] name failslab, interval 1, probability 0, space 0, times 0 [ 1279.107297] CPU: 1 PID: 7765 Comm: syz-executor.6 Not tainted 5.10.229 #1 [ 1279.108125] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1279.109133] Call Trace: [ 1279.109459] dump_stack+0x107/0x167 [ 1279.109911] should_fail.cold+0x5/0xa 14:43:30 executing program 2: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) unshare(0xc030000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$FITRIM(r1, 0xc020662a, &(0x7f0000000080)={0x0, 0xfff7fffffffffff7}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x6, 0x20, 0x83, 0x0, 0xffffffffffff0000, 0x1258, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0xfe, 0x400}, 0x80, 0xcdd, 0x3, 0x6, 0x4d, 0x1, 0x2, 0x0, 0xadb7, 0x0, 0x1000}, r0, 0x4, r1, 0x1) semctl$IPC_RMID(0x0, 0x0, 0x10) r2 = semget$private(0x0, 0x6, 0x0) semctl$GETZCNT(r2, 0x741ad5bdf2b7fe62, 0xf, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) 14:43:30 executing program 7: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() r2 = open_tree(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x9100) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x204, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r2, 0x0) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x5, 0xc0, 0x81, 0x80, 0x0, 0x4, 0x10400, 0x6, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f0000000280), 0xa}, 0x4000, 0x0, 0x7, 0x5, 0x7fffffff, 0x0, 0x7, 0x0, 0x6, 0x0, 0xd7c}, r1, 0xc, r2, 0x1) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x1f, 0x5, 0x3, 0x0, 0x0, 0x3, 0x1000, 0xa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x8ae9, 0x2}, 0x5c088, 0x0, 0xed, 0x1, 0x4, 0x5, 0x1, 0x0, 0x81, 0x0, 0x8000}, r1, 0xb, r0, 0x1) semctl$IPC_RMID(0x0, 0x0, 0x10) [ 1279.110415] ? anon_vma_clone+0xdc/0x590 [ 1279.118464] should_failslab+0x5/0x20 [ 1279.118930] kmem_cache_alloc+0x5b/0x310 [ 1279.119429] anon_vma_clone+0xdc/0x590 [ 1279.119910] __split_vma+0x17c/0x570 [ 1279.120366] __do_munmap+0x365/0x1260 [ 1279.120836] ? lock_release+0x680/0x680 [ 1279.121321] mmap_region+0x776/0x1590 [ 1279.121789] ? get_unmapped_area+0x2f0/0x420 [ 1279.122370] do_mmap+0xcdb/0x11e0 [ 1279.122863] vm_mmap_pgoff+0x198/0x1f0 [ 1279.123411] ? randomize_page+0xb0/0xb0 [ 1279.123983] ksys_mmap_pgoff+0x41c/0x560 [ 1279.124544] ? find_mergeable_anon_vma+0x250/0x250 [ 1279.125227] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1279.125957] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1279.126650] do_syscall_64+0x33/0x40 [ 1279.127117] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1279.127751] RIP: 0033:0x7f13c0819b62 [ 1279.128213] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1279.130498] RSP: 002b:00007f13bdd8f0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1279.131424] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f13c0819b62 [ 1279.132312] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000020ffc000 [ 1279.133179] RBP: 0000000020ffc000 R08: 0000000000000005 R09: 0000000010000000 [ 1279.134047] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200001c0 [ 1279.134949] R13: 0000000020ffc000 R14: 0000000020000040 R15: 00000000200a0000 14:43:30 executing program 4: semget$private(0x0, 0x4000, 0x0) io_uring_enter(0xffffffffffffffff, 0x3e1f, 0x822, 0x2, &(0x7f0000000000)={[0xc66]}, 0x8) r0 = fork() r1 = open_tree(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x9100) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x204, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x5, 0xc0, 0x81, 0x80, 0x0, 0x4, 0x10400, 0x6, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f0000000280), 0xa}, 0x4000, 0x0, 0x7, 0x5, 0x7fffffff, 0x0, 0x7, 0x0, 0x6, 0x0, 0xd7c}, r0, 0xc, r1, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x3}, r0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:43:30 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r4}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:43:30 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:43:30 executing program 0: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffc52, 0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) unshare(0x100) 14:43:30 executing program 2: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x6, 0x0) semctl$GETZCNT(r0, 0x741ad5bdf2b7fe62, 0xf, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:43:30 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) 14:43:30 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) (fail_nth: 91) 14:43:30 executing program 4: unshare(0x8000000) r0 = semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000600)=[{0x4, 0x200, 0x800}, {0x3, 0x8001, 0x1000}], 0x2, &(0x7f0000000680)={r1, r2+60000000}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r3, 0x4, 0x2400) fcntl$setstatus(r3, 0x4, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000040)={0x52c, 0x28, 0x200, 0x70bd25, 0x25dfdbfd, {0xb}, [@generic="1e83e06a750801b217a4b7e6e9c8655262c06087aff122232d3a0de724d11fc67d", @generic="72bd34ed1b1211fd6ce9f80594692756ad2cb10be85558411e2283adbc10d32014fd247217a063f31eb140bdca7be07d49bbeaa8cd2905421d44fa01f443bea39075ad89ca6f15278e1ca1ec2a9ca7e8054d95cca4a32058f309c221a5c607c1f1ed7f43994248e5c88daaa8dd57b0772ff422b884788b7c33386543174920b6041507f5676bd3cba6d6decf95b9f71ff3a969d85281b23880fd1dcee873d5ffcad2451c5b5692cdfe192ac07d67315f1fcc99d145", @nested={0x28f, 0x12, 0x0, 0x1, [@typed={0x5, 0xa, 0x0, 0x0, @str='\x00'}, @generic="8bddb28434797c231f21d9f4660465fd820512f59ec1b4c922cc692e935db844b7ecee8f17cd114daadf7af90886d5caf3469eb7689088cbbb2412f545e081a6af31b93a6fef39b87074d9ccb0168438824ea5989e7033ad644b0f16e02a729d9763464362a52aebc43abbd9c48d92a9b2031ecad67b40ba5027aefc5ab6cd60cd2787cf87f84fe4e65c474c9caa624b904a6471521536f757dfe84d9474b6ad9404c6705a4a3573b0fc7de8034dbb9cd792b9056e7c82c5b176405d90364aa04a20bcd7879c50c03fc1b144149e990087f038b737fb57f862", @typed={0x25, 0xc, 0x0, 0x0, @binary="a0c4d184802a40e578b45f3531893b45cadf836e569d8f2b960d29d15b8482acca"}, @typed={0x8, 0x1b, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @generic="f382067dd1d25a3eb4de4688fb9e283954dd712446fac0fffd6ff1c750a93dae32b53449021073a188df1aa8203b0f118ad5c7941f", @generic="f3700d142e740e0ab861908e528d7c3134640bdc13a065f95a065d11d48ca00d3c84ee1958a42542f8118928de21477579ba2383d38a5c75eb9a0a4d51d0554de005d1b9f9bdfb6f5aa76e77157962960aa448d7c192283887faad2891623d3bb37e2d39e5937c61d29782c5e3f6704151d3f5ee31bfcd46a2f6b1784f5c629d6eb0468205d486055cdb1bb0eb6c60efcc3983f0", @typed={0x8, 0x8f, 0x0, 0x0, @fd=r3}, @generic='6', @generic, @generic="2b4ed31699b912593a611b2a5abd75902dfa452a4df103bc6a83a8c4d5aead6c002538ee49fa17ddda936e59361ced413f51e32224353ba56dd8f95b3abfa0039d684055d784b6f604192540b5a92bb68ace113009abfe1aab5d73e0cbf9219b28368669794c4c1c28ea9e59c34acf652e75b5c34225df18043ae9dde6fd006f88cf13ae94b63cbd11fdf40d5c449309ac562ce27a47f370b40c6525256c2c41b3892b729126c652"]}, @generic="92f73479e575cf77b0f192853b7c438dbdcd3e1e998a708d1d69a5bd299c9ad7daec06ca29b6f73bee1f32eb412c4ef1ac6d85922a053a3961f8519051ee8e0f1930b4445a52e7c44fc3dcf860a9a845978c184d98552dc76ed1b810ea616714ae202f67ffa33f02f6161dd4943cca78cdafc52a3b7d317aa2b304e79cf651f110395e89f879097af47cacd4c76d446e0807a25e232a7fd4d2472378d6", @generic="cdc0355e8c267797c73259adec38f2408f3e3d7a34d50f77837dfdee448885707234ef52d9e2d16e783194f9689935150fa5f2215231c75415e5dda5f85d78f1ae8914b7aea242c4d6a61a4663a1b3ce3fea933d9851cb21cd988f26911a6797564f9e76bdefb8299980f9f5b799b8b9bc87d6c37e13a58270a8610f6b10c1", @typed={0x8, 0x24, 0x0, 0x0, @ipv4=@private=0xa010101}, @generic="43bb3eae333f8b6f7e284c1340d1f2f71cc5c392750aa861aaf6be224494cf134e8cc11698aa9a801b684559973b76a6d5a74e2db58e58cc6737b1b8dddc440c786a1c51c6f82cf6bb13132c90d93c2a351bde390485da3088cc9a7f009a5504ce891e8ae919150075fbc83ddc05f62cd8a8bad37eccd4cc430527f80f087525df8af1029475d847f567d0bc38"]}, 0x52c}, 0x1, 0x0, 0x0, 0x40}, 0x4000800) semctl$IPC_RMID(0x0, 0x0, 0x10) unshare(0x60000) [ 1279.339969] FAULT_INJECTION: forcing a failure. [ 1279.339969] name failslab, interval 1, probability 0, space 0, times 0 [ 1279.341422] CPU: 1 PID: 7795 Comm: syz-executor.6 Not tainted 5.10.229 #1 [ 1279.342259] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1279.343281] Call Trace: [ 1279.343616] dump_stack+0x107/0x167 [ 1279.344070] should_fail.cold+0x5/0xa [ 1279.344540] ? create_object.isra.0+0x3a/0xa20 [ 1279.345101] should_failslab+0x5/0x20 [ 1279.345566] kmem_cache_alloc+0x5b/0x310 [ 1279.346067] create_object.isra.0+0x3a/0xa20 [ 1279.346611] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1279.347234] kmem_cache_alloc+0x159/0x310 [ 1279.347746] anon_vma_clone+0xdc/0x590 [ 1279.348240] __split_vma+0x17c/0x570 [ 1279.348706] __do_munmap+0x365/0x1260 [ 1279.349189] ? lock_release+0x680/0x680 [ 1279.349678] mmap_region+0x776/0x1590 [ 1279.350161] ? get_unmapped_area+0x2f0/0x420 [ 1279.350726] do_mmap+0xcdb/0x11e0 [ 1279.351156] vm_mmap_pgoff+0x198/0x1f0 [ 1279.351634] ? randomize_page+0xb0/0xb0 [ 1279.352132] ksys_mmap_pgoff+0x41c/0x560 [ 1279.352628] ? find_mergeable_anon_vma+0x250/0x250 [ 1279.353238] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1279.353899] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1279.354680] do_syscall_64+0x33/0x40 [ 1279.355147] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1279.355779] RIP: 0033:0x7f13c0819b62 [ 1279.356248] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1279.358505] RSP: 002b:00007f13bdd8f0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1279.359431] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f13c0819b62 [ 1279.360296] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000020ffc000 [ 1279.361173] RBP: 0000000020ffc000 R08: 0000000000000005 R09: 0000000010000000 [ 1279.362050] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200001c0 [ 1279.362925] R13: 0000000020ffc000 R14: 0000000020000040 R15: 00000000200a0000 14:43:44 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r4}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:43:44 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) (fail_nth: 92) 14:43:44 executing program 7: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) pkey_mprotect(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x5, 0xffffffffffffffff) r0 = semget$private(0x0, 0x6, 0x0) semctl$GETZCNT(r0, 0x741ad5bdf2b7fe62, 0xf, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x4, 0x73a1, 0x1800}, {0x1, 0xf72, 0x800}, {0x1, 0x0, 0x800}, {0x1, 0x6, 0x3000}, {0x3, 0x3, 0x1000}, {0x0, 0x5, 0x1800}, {0x4, 0x5, 0x1000}], 0x7, &(0x7f0000000040)={0x77359400}) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:43:44 executing program 0: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) unshare(0x20000800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:43:44 executing program 2: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = semget(0x3, 0x4, 0xaa) semop(r0, &(0x7f0000000000)=[{0x2, 0xd3, 0x1800}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:43:44 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) 14:43:44 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:43:44 executing program 4: unshare(0x8000000) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) [ 1293.142128] FAULT_INJECTION: forcing a failure. [ 1293.142128] name failslab, interval 1, probability 0, space 0, times 0 [ 1293.143620] CPU: 1 PID: 7821 Comm: syz-executor.6 Not tainted 5.10.229 #1 [ 1293.144454] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1293.145465] Call Trace: [ 1293.145793] dump_stack+0x107/0x167 [ 1293.146239] should_fail.cold+0x5/0xa [ 1293.146706] ? anon_vma_clone+0xdc/0x590 [ 1293.147223] should_failslab+0x5/0x20 [ 1293.147687] kmem_cache_alloc+0x5b/0x310 [ 1293.148186] anon_vma_clone+0xdc/0x590 [ 1293.148666] __split_vma+0x17c/0x570 [ 1293.149122] __do_munmap+0x365/0x1260 [ 1293.149592] ? lock_release+0x680/0x680 [ 1293.150075] mmap_region+0x776/0x1590 [ 1293.150544] ? get_unmapped_area+0x2f0/0x420 [ 1293.151098] do_mmap+0xcdb/0x11e0 [ 1293.151526] vm_mmap_pgoff+0x198/0x1f0 [ 1293.152004] ? randomize_page+0xb0/0xb0 [ 1293.152499] ksys_mmap_pgoff+0x41c/0x560 [ 1293.152995] ? find_mergeable_anon_vma+0x250/0x250 [ 1293.153595] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1293.154234] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1293.154877] do_syscall_64+0x33/0x40 [ 1293.155331] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1293.155955] RIP: 0033:0x7f13c0819b62 [ 1293.156415] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1293.158659] RSP: 002b:00007f13bdd8f0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1293.163620] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f13c0819b62 [ 1293.164487] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000020ffc000 [ 1293.165349] RBP: 0000000020ffc000 R08: 0000000000000005 R09: 0000000010000000 [ 1293.166212] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200001c0 [ 1293.167096] R13: 0000000020ffc000 R14: 0000000020000040 R15: 00000000200a0000 14:43:44 executing program 5: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() r2 = open_tree(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x9100) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x204, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r2, 0x0) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x5, 0xc0, 0x81, 0x80, 0x0, 0x4, 0x10400, 0x6, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f0000000280), 0xa}, 0x4000, 0x0, 0x7, 0x5, 0x7fffffff, 0x0, 0x7, 0x0, 0x6, 0x0, 0xd7c}, r1, 0xc, r2, 0x1) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x1f, 0x5, 0x3, 0x0, 0x0, 0x3, 0x1000, 0xa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x8ae9, 0x2}, 0x5c088, 0x0, 0xed, 0x1, 0x4, 0x5, 0x1, 0x0, 0x81, 0x0, 0x8000}, r1, 0xb, r0, 0x1) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:43:44 executing program 7: unshare(0x8000000) unshare(0x0) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) r0 = semget(0x0, 0x3, 0x688) semctl$IPC_RMID(r0, 0x0, 0x0) 14:43:44 executing program 4: fstat(0xffffffffffffffff, &(0x7f0000000000)) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x200000, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000440)={{{@in=@initdev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@broadcast}}, &(0x7f0000000540)=0xe8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000580)=@updpolicy={0x2bc, 0x19, 0x4, 0x70bd2a, 0x25dfdbfd, {{@in6=@private0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x4e24, 0x3, 0x4e22, 0x80, 0x2, 0x40, 0xa0, 0x29, 0x0, r1}, {0x200, 0x9, 0x9, 0x0, 0x26c, 0x1f, 0x11, 0x9}, {0xffffffff, 0x1, 0x3f, 0x3}, 0x3, 0x0, 0x1, 0x0, 0x1, 0x3}, [@extra_flags={0x8, 0x18, 0x8001}, @proto={0x5, 0x19, 0x3c}, @migrate={0x1cc, 0x11, [{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@loopback, @in6=@loopback, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2b, 0x5, 0x0, 0x3505, 0x2, 0x2}, {@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@local, @in6=@private2, 0x33, 0x3, 0x0, 0x0, 0x8, 0x2}, {@in=@multicast2, @in6=@mcast1, @in=@remote, @in6=@remote, 0x0, 0x3, 0x0, 0x3501, 0xa, 0x2}, {@in=@multicast1, @in6=@loopback, @in=@local, @in=@rand_addr=0x64010101, 0xff, 0x0, 0x0, 0x3505, 0x2, 0x2}, {@in=@broadcast, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@rand_addr=0x64010101, @in6=@dev={0xfe, 0x80, '\x00', 0x3c}, 0x0, 0x4, 0x0, 0x3502, 0x2, 0x2}, {@in6=@dev={0xfe, 0x80, '\x00', 0x43}, @in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, @in6=@remote, 0x33, 0x3, 0x0, 0x0, 0xa, 0xa}]}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e21, 0x4e21, @in=@empty}}, @lastused={0xc, 0xf, 0x100}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x40040}, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000080), 0x4, 0x40001) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001e00)={0x10f8, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@nested={0x10d6, 0x62, 0x0, 0x1, [@typed={0x55, 0x31, 0x0, 0x0, @binary="5a69831d0bed92034cded25d6b97c4f30b6ebfd6b349daaa5511893824eb0718cf096c18bff17f2fb462dc76732267ff6efae0f9d92d657974d5b55b4a9b4a19013ea194b95e15862bfdc30f98b7a78693"}, @typed={0xc, 0x8f, 0x0, 0x0, @u64=0x401}, @typed={0x8, 0x59, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x4, 0x30}, @typed={0x8, 0x75, 0x0, 0x0, @fd=r2}, @typed={0x8, 0x6, 0x0, 0x0, @pid}, @generic="0c36002525eda8fc711439b4e868f07199251992f86387c0e36445b9e729bd4e92bc66686b17f18fcb873fa078896ac4d63d97e7a8028f43fda1caeb2784", @generic="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", @generic="e4f181dc558e38474c2c32d71c510f73500fe3db"]}, @nested={0xc, 0x1d, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xffffffffffffffff}]}]}, 0x10f8}, 0x1, 0x0, 0x0, 0x40000004}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000001440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001400)={&(0x7f00000002c0)={0x110c, r4, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x80000000, 0x70}}}}, [@NL80211_ATTR_FRAME_MATCH={0x33, 0x5b, "42616192964763df427f523f5fb9a4971f0f9895583dfb3e87d929a06e36c3a45cf57d02195682ea81860a145d75b7"}, @NL80211_ATTR_FRAME_MATCH={0x3f, 0x5b, "8e1c40440d8115e8bfbf45646737868c26e732d3d8b80f4cab46b71cd9b71f29061c9ed0096b4ff086fcfc6e178d2a273fae1624d9340cb28e194d"}, @NL80211_ATTR_FRAME_MATCH={0x17, 0x5b, "d44ca23d218ec91ed2413f6dbc402ca386a932"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9a}, @NL80211_ATTR_FRAME_TYPE={0x0, 0x65, 0x4}, @NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "ac"}, @NL80211_ATTR_FRAME_MATCH={0x9, 0x5b, "0848ef993b8eaf0afae254a5df05095e1529b9859d43ab3fe43bd4a18d0f8beb1c637dfe1f9b4d561088da042f"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x101}, @NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x110c}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) getsockopt$bt_hci(r2, 0x0, 0x3, &(0x7f00000000c0)=""/206, &(0x7f00000001c0)=0xce) 14:43:44 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r4}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:43:44 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:43:44 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) [ 1293.288960] netlink: 4316 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1293.293447] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7840 comm=syz-executor.4 14:43:44 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) (fail_nth: 93) [ 1293.365867] FAULT_INJECTION: forcing a failure. [ 1293.365867] name failslab, interval 1, probability 0, space 0, times 0 [ 1293.367441] CPU: 0 PID: 7852 Comm: syz-executor.6 Not tainted 5.10.229 #1 [ 1293.368279] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1293.369290] Call Trace: [ 1293.369621] dump_stack+0x107/0x167 [ 1293.370076] should_fail.cold+0x5/0xa [ 1293.370553] ? anon_vma_clone+0xdc/0x590 [ 1293.371081] should_failslab+0x5/0x20 [ 1293.371551] kmem_cache_alloc+0x5b/0x310 [ 1293.372069] anon_vma_clone+0xdc/0x590 [ 1293.372567] __split_vma+0x17c/0x570 [ 1293.373035] __do_munmap+0x365/0x1260 [ 1293.373517] ? lock_release+0x680/0x680 [ 1293.374014] mmap_region+0x776/0x1590 [ 1293.374499] ? get_unmapped_area+0x2f0/0x420 [ 1293.375065] do_mmap+0xcdb/0x11e0 [ 1293.375510] vm_mmap_pgoff+0x198/0x1f0 [ 1293.376001] ? randomize_page+0xb0/0xb0 [ 1293.376517] ksys_mmap_pgoff+0x41c/0x560 [ 1293.377022] ? find_mergeable_anon_vma+0x250/0x250 [ 1293.377633] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1293.378280] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1293.378935] do_syscall_64+0x33/0x40 [ 1293.379397] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1293.380026] RIP: 0033:0x7f13c0819b62 [ 1293.380489] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1293.382746] RSP: 002b:00007f13bdd8f0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1293.383691] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f13c0819b62 [ 1293.384565] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000020ffc000 [ 1293.385438] RBP: 0000000020ffc000 R08: 0000000000000005 R09: 0000000010000000 [ 1293.386310] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200001c0 [ 1293.387202] R13: 0000000020ffc000 R14: 0000000020000040 R15: 00000000200a0000 14:43:58 executing program 7: mknodat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8900, 0x7) unshare(0xc010100) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@v2={0x3, 0x1, 0x10, 0x1, 0xfb, "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"}, 0x104, 0x1) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) unshare(0x40000100) 14:43:58 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) (fail_nth: 94) 14:43:58 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:43:58 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r3}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r3, 0x3400000000000000, 0x20, 0x1}) [ 1307.313148] FAULT_INJECTION: forcing a failure. [ 1307.313148] name failslab, interval 1, probability 0, space 0, times 0 [ 1307.314710] CPU: 0 PID: 7871 Comm: syz-executor.6 Not tainted 5.10.229 #1 [ 1307.315551] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1307.316560] Call Trace: [ 1307.316886] dump_stack+0x107/0x167 [ 1307.317332] should_fail.cold+0x5/0xa [ 1307.317829] ? vm_area_alloc+0x1c/0x110 [ 1307.318317] should_failslab+0x5/0x20 [ 1307.318782] kmem_cache_alloc+0x5b/0x310 [ 1307.319292] vm_area_alloc+0x1c/0x110 [ 1307.319768] mmap_region+0x819/0x1590 [ 1307.320238] ? get_unmapped_area+0x2f0/0x420 [ 1307.320774] do_mmap+0xcdb/0x11e0 [ 1307.321202] vm_mmap_pgoff+0x198/0x1f0 [ 1307.321679] ? randomize_page+0xb0/0xb0 [ 1307.322173] ksys_mmap_pgoff+0x41c/0x560 14:43:58 executing program 0: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x6, 0x0) semctl$GETZCNT(r0, 0x741ad5bdf2b7fe62, 0xf, 0x0) semctl$SEM_INFO(r0, 0x0, 0x13, &(0x7f0000000000)=""/245) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:43:58 executing program 4: unshare(0x8000000) r0 = semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xd, 0xffffffffffffffff, 0x0) semctl$GETNCNT(r0, 0x2, 0xe, &(0x7f0000000000)=""/121) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:43:58 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) [ 1307.322669] ? find_mergeable_anon_vma+0x250/0x250 [ 1307.331290] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1307.331935] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1307.332562] do_syscall_64+0x33/0x40 [ 1307.333014] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1307.333635] RIP: 0033:0x7f13c0819b62 [ 1307.334092] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1307.336344] RSP: 002b:00007f13bdd6e0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1307.337274] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f13c0819b62 [ 1307.338139] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000020ffc000 [ 1307.339002] RBP: 0000000020ffc000 R08: 0000000000000005 R09: 0000000010000000 [ 1307.339881] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200001c0 [ 1307.340749] R13: 0000000020ffc000 R14: 0000000020000040 R15: 00000000200a0000 14:43:58 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:43:58 executing program 5: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:43:58 executing program 0: unshare(0x8000000) unshare(0x20000080) semget$private(0x0, 0x4000, 0x0) unshare(0x2000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xe639}, 0x2080, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x40000}, 0x0, 0xf, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:43:58 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:43:59 executing program 4: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x66000000) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:43:59 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:43:59 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:43:59 executing program 7: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) unshare(0x200) r0 = semget$private(0x0, 0x6, 0x0) semctl$GETZCNT(r0, 0x741ad5bdf2b7fe62, 0xf, 0x0) semop(r0, &(0x7f0000000000)=[{0x3, 0x8, 0x800}, {0x3, 0x101, 0x800}, {0x0, 0x1f, 0x800}, {0x0, 0x4c00, 0x1000}, {0x3, 0x8, 0x800}], 0x5) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:43:59 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) (fail_nth: 95) 14:43:59 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:43:59 executing program 0: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8450, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:43:59 executing program 5: unshare(0x8000000) r0 = semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semctl$GETZCNT(r1, 0x741ad5bdf2b7fe62, 0xf, 0x0) semop(r0, &(0x7f0000000080)=[{0x1, 0x3, 0x800}], 0x1) semtimedop(r1, &(0x7f0000000000)=[{0x2, 0xdb}], 0x1, &(0x7f0000000040)={0x0, 0x3938700}) semctl$IPC_RMID(0x0, 0x0, 0x10) [ 1307.598514] FAULT_INJECTION: forcing a failure. [ 1307.598514] name failslab, interval 1, probability 0, space 0, times 0 [ 1307.600090] CPU: 1 PID: 7901 Comm: syz-executor.6 Not tainted 5.10.229 #1 [ 1307.600924] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1307.601935] Call Trace: [ 1307.602266] dump_stack+0x107/0x167 [ 1307.602713] should_fail.cold+0x5/0xa [ 1307.603183] ? vm_area_alloc+0x1c/0x110 [ 1307.603743] should_failslab+0x5/0x20 [ 1307.604279] kmem_cache_alloc+0x5b/0x310 [ 1307.604859] vm_area_alloc+0x1c/0x110 [ 1307.605398] mmap_region+0x819/0x1590 [ 1307.605947] ? get_unmapped_area+0x2f0/0x420 [ 1307.606576] do_mmap+0xcdb/0x11e0 [ 1307.607077] vm_mmap_pgoff+0x198/0x1f0 [ 1307.607596] ? randomize_page+0xb0/0xb0 [ 1307.608090] ksys_mmap_pgoff+0x41c/0x560 [ 1307.608583] ? find_mergeable_anon_vma+0x250/0x250 [ 1307.609180] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1307.609813] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1307.610438] do_syscall_64+0x33/0x40 [ 1307.610890] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1307.611554] RIP: 0033:0x7f13c0819b62 [ 1307.612080] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1307.614703] RSP: 002b:00007f13bdd8f0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1307.615777] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f13c0819b62 [ 1307.616794] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000020ffc000 [ 1307.617810] RBP: 0000000020ffc000 R08: 0000000000000005 R09: 0000000010000000 [ 1307.618834] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200001c0 [ 1307.619839] R13: 0000000020ffc000 R14: 0000000020000040 R15: 00000000200a0000 [ 1307.621738] audit: type=1400 audit(1731249839.178:12): avc: denied { tracepoint } for pid=7905 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 14:43:59 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:44:19 executing program 2: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) semget$private(0x0, 0x4, 0x20) 14:44:19 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:44:19 executing program 4: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) unshare(0x84000000) unshare(0x40000000) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:44:19 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x0, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:44:19 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r3}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r3, 0x3400000000000000, 0x20, 0x1}) 14:44:19 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) (fail_nth: 96) 14:44:19 executing program 0: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$setstatus(r0, 0x4, 0x0) pread64(r0, &(0x7f0000000000)=""/237, 0xed, 0xff) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:44:19 executing program 7: unshare(0x8000000) r0 = semget$private(0x0, 0x4000, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000000)=""/33) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) [ 1327.589416] FAULT_INJECTION: forcing a failure. [ 1327.589416] name failslab, interval 1, probability 0, space 0, times 0 [ 1327.590856] CPU: 0 PID: 7929 Comm: syz-executor.6 Not tainted 5.10.229 #1 [ 1327.591712] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1327.592753] Call Trace: [ 1327.593072] dump_stack+0x107/0x167 [ 1327.593589] should_fail.cold+0x5/0xa [ 1327.594044] ? create_object.isra.0+0x3a/0xa20 [ 1327.594639] should_failslab+0x5/0x20 [ 1327.595088] kmem_cache_alloc+0x5b/0x310 [ 1327.595633] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1327.596418] create_object.isra.0+0x3a/0xa20 [ 1327.596933] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1327.597632] kmem_cache_alloc+0x159/0x310 [ 1327.598139] ptlock_alloc+0x1d/0x70 [ 1327.598633] pte_alloc_one+0x68/0x1a0 [ 1327.599085] __pte_alloc+0x1d/0x330 [ 1327.599618] remap_pfn_range_internal+0x9a3/0xf60 [ 1327.600209] ? lookup_memtype+0x5b/0x200 [ 1327.600760] ? apply_to_existing_page_range+0x40/0x40 [ 1327.601469] remap_pfn_range+0xcd/0x160 [ 1327.601941] ? remap_pfn_range_notrack+0x70/0x70 [ 1327.602624] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 1327.603866] io_uring_mmap+0x398/0x530 [ 1327.604702] mmap_region+0xb5a/0x1590 [ 1327.605176] do_mmap+0xcdb/0x11e0 [ 1327.605662] vm_mmap_pgoff+0x198/0x1f0 [ 1327.606143] ? randomize_page+0xb0/0xb0 [ 1327.606687] ksys_mmap_pgoff+0x41c/0x560 [ 1327.607167] ? find_mergeable_anon_vma+0x250/0x250 [ 1327.607832] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1327.608588] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1327.609197] do_syscall_64+0x33/0x40 [ 1327.609688] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1327.610291] RIP: 0033:0x7f13c0819b62 [ 1327.610781] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1327.613110] RSP: 002b:00007f13bdd8f0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1327.613996] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f13c0819b62 [ 1327.614834] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000020ffc000 [ 1327.615752] RBP: 0000000020ffc000 R08: 0000000000000005 R09: 0000000010000000 [ 1327.616604] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200001c0 [ 1327.617434] R13: 0000000020ffc000 R14: 0000000020000040 R15: 00000000200a0000 14:44:19 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x0, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:44:19 executing program 2: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x58800, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x6, 0x0) semctl$GETZCNT(r0, 0x741ad5bdf2b7fe62, 0xf, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:44:19 executing program 7: unshare(0x8000000) unshare(0x60340) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x484, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:44:32 executing program 0: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) r0 = semget(0x3, 0x4, 0x311) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000000)=""/51) 14:44:32 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:44:32 executing program 4: unshare(0x7e080380) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:44:32 executing program 2: unshare(0x8000000) unshare(0x68000000) r0 = semget$private(0x0, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x5e, 0x208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = semget$private(0x0, 0x1, 0x40) semctl$GETALL(r2, 0x0, 0xd, &(0x7f00000011c0)=""/234) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$FITRIM(r3, 0xc020662a, &(0x7f0000000080)={0x0, 0xfff7fffffffffff7}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r4, 0x4, 0x2400) fcntl$setstatus(r4, 0x4, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000001180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32=r4, @ANYBLOB="00002e2f66696c3f0dd0"]) semctl$GETNCNT(r2, 0x1, 0xe, &(0x7f0000000000)=""/219) semctl$IPC_RMID(0x0, 0x0, 0x10) semtimedop(r0, &(0x7f0000001100)=[{0x3, 0x8, 0x400}, {0x3, 0x3, 0x1800}, {0x2, 0x0, 0x1800}], 0x3, &(0x7f0000001140)={0x0, 0x989680}) semctl$SEM_INFO(r2, 0x3, 0x13, &(0x7f0000000100)=""/4096) 14:44:32 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) (fail_nth: 97) 14:44:32 executing program 7: unshare(0x8000000) unshare(0x80) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:44:32 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x0, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:44:32 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32]) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r3}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r3, 0x3400000000000000, 0x20, 0x1}) [ 1341.354576] FAULT_INJECTION: forcing a failure. [ 1341.354576] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1341.356228] CPU: 0 PID: 7970 Comm: syz-executor.6 Not tainted 5.10.229 #1 [ 1341.357086] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1341.358106] Call Trace: [ 1341.358443] dump_stack+0x107/0x167 [ 1341.358901] should_fail.cold+0x5/0xa [ 1341.359391] __alloc_pages_nodemask+0x182/0x600 [ 1341.359976] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1341.360780] alloc_pages_current+0x187/0x280 [ 1341.361337] pte_alloc_one+0x16/0x1a0 [ 1341.361817] __pte_alloc+0x1d/0x330 [ 1341.362281] remap_pfn_range_internal+0x9a3/0xf60 [ 1341.362921] ? apply_to_existing_page_range+0x40/0x40 [ 1341.363585] remap_pfn_range+0xcd/0x160 [ 1341.364084] ? remap_pfn_range_notrack+0x70/0x70 [ 1341.364686] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 1341.365345] io_uring_mmap+0x398/0x530 [ 1341.365837] mmap_region+0xb5a/0x1590 [ 1341.366339] do_mmap+0xcdb/0x11e0 [ 1341.366787] vm_mmap_pgoff+0x198/0x1f0 [ 1341.367283] ? randomize_page+0xb0/0xb0 [ 1341.367805] ksys_mmap_pgoff+0x41c/0x560 [ 1341.368316] ? find_mergeable_anon_vma+0x250/0x250 [ 1341.368951] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1341.369604] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1341.370251] do_syscall_64+0x33/0x40 [ 1341.370716] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1341.371351] RIP: 0033:0x7f13c0819b62 [ 1341.371824] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1341.374090] RSP: 002b:00007f13bdd8f0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1341.375032] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f13c0819b62 [ 1341.375919] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000020ffc000 [ 1341.376809] RBP: 0000000020ffc000 R08: 0000000000000005 R09: 0000000010000000 [ 1341.377684] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200001c0 [ 1341.378560] R13: 0000000020ffc000 R14: 0000000020000040 R15: 00000000200a0000 14:44:32 executing program 0: unshare(0x8000000) r0 = semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) r1 = semget$private(0x0, 0x6, 0x0) clock_gettime(0x0, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) semtimedop(r0, &(0x7f00000001c0)=[{0x2, 0x9, 0x1800}, {0x1, 0x100, 0x800}, {0x3, 0x85b, 0x1000}, {0x3, 0xecc, 0x3800}, {0x4, 0x7}, {0x4, 0x0, 0x1800}, {0x0, 0x2, 0x1000}, {0x4, 0x20, 0x1000}], 0x8, &(0x7f0000000180)={r2, r3+10000000}) semctl$GETZCNT(r1, 0x741ad5bdf2b7fe62, 0xf, 0x0) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000000)=""/212) 14:44:32 executing program 4: unshare(0x8000000) unshare(0x40020000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:44:32 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:44:33 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) (fail_nth: 98) 14:44:33 executing program 7: r0 = fork() r1 = open_tree(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x9100) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10304, 0x100000000000, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0xa) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x5, 0xc0, 0x81, 0x80, 0x0, 0x4, 0x10400, 0x6, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f0000000280), 0xa}, 0x4000, 0x0, 0x7, 0x5, 0x7fffffff, 0x0, 0x7, 0x0, 0x6, 0x0, 0xd7c}, r0, 0xc, r1, 0x1) syz_open_procfs(r0, &(0x7f0000000000)='net/ip6_mr_vif\x00') unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5e, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r3 = semget$private(0x0, 0x3, 0x300) semtimedop(r3, &(0x7f0000000180)=[{0x2, 0x7, 0x400}, {0x2, 0x9, 0x800}, {0x1, 0x6ba, 0x3000}, {0x4, 0x99, 0x800}, {0x2, 0xffff, 0x1800}, {0x2, 0x2, 0x1800}], 0x6, &(0x7f00000001c0)={0x0, 0x3938700}) ioctl(r2, 0x5e, &(0x7f0000000080)="75aef1927a844a1a32bfc31050407ae994ebb0c3d219e3df31a3185bb961c9b08bd1016459b01955f7344a33285e623559429e380139e091f2ab99fed1f53037a42fee7a92d5d21786b6ab77c8fb88162845b19a8b1938db9b52118b3f4782afa93103f7f4519edbb6d4ce5fad7e5f61115f54c58a9bae4f96eff2055aecf0436cba447731d404b5a7f0c65778ba4b4cba720948ee26059d58515ec9923daacabe1dc55df5eb34890d7f3debb655441d4fdd46913efb805102d5bd173a68753b719e5fbecb07faf77deb76402ada6f6d593e104ca73d78e4bbf19d17b8") semctl$IPC_RMID(0x0, 0x0, 0x10) 14:44:33 executing program 5: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) r0 = semget(0x3, 0x4, 0x311) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000000)=""/51) [ 1341.508449] FAULT_INJECTION: forcing a failure. [ 1341.508449] name failslab, interval 1, probability 0, space 0, times 0 [ 1341.509932] CPU: 1 PID: 7986 Comm: syz-executor.6 Not tainted 5.10.229 #1 [ 1341.510781] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1341.511818] Call Trace: [ 1341.512155] dump_stack+0x107/0x167 [ 1341.512648] should_fail.cold+0x5/0xa [ 1341.513124] ? ptlock_alloc+0x1d/0x70 [ 1341.513591] should_failslab+0x5/0x20 [ 1341.514058] kmem_cache_alloc+0x5b/0x310 [ 1341.514559] ptlock_alloc+0x1d/0x70 [ 1341.515006] pte_alloc_one+0x68/0x1a0 [ 1341.515471] __pte_alloc+0x1d/0x330 [ 1341.515918] remap_pfn_range_internal+0x9a3/0xf60 [ 1341.516559] ? apply_to_existing_page_range+0x40/0x40 [ 1341.517198] remap_pfn_range+0xcd/0x160 [ 1341.517694] ? remap_pfn_range_notrack+0x70/0x70 [ 1341.518366] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 1341.519109] io_uring_mmap+0x398/0x530 [ 1341.519672] mmap_region+0xb5a/0x1590 [ 1341.520229] do_mmap+0xcdb/0x11e0 [ 1341.520742] vm_mmap_pgoff+0x198/0x1f0 [ 1341.521404] ? randomize_page+0xb0/0xb0 [ 1341.521987] ksys_mmap_pgoff+0x41c/0x560 [ 1341.522650] ? find_mergeable_anon_vma+0x250/0x250 [ 1341.523489] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1341.524248] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1341.525116] do_syscall_64+0x33/0x40 [ 1341.525845] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1341.526701] RIP: 0033:0x7f13c0819b62 [ 1341.527237] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1341.530270] RSP: 002b:00007f13bdd8f0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1341.531558] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f13c0819b62 [ 1341.532598] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000020ffc000 [ 1341.533634] RBP: 0000000020ffc000 R08: 0000000000000005 R09: 0000000010000000 [ 1341.534668] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200001c0 [ 1341.535696] R13: 0000000020ffc000 R14: 0000000020000040 R15: 00000000200a0000 14:44:33 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, 0x0}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:44:33 executing program 0: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x4}, 0x484}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:44:33 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:44:33 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:44:33 executing program 5: unshare(0x8000000) r0 = semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) r1 = semget$private(0x0, 0x6, 0x0) clock_gettime(0x0, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) semtimedop(r0, &(0x7f00000001c0)=[{0x2, 0x9, 0x1800}, {0x1, 0x100, 0x800}, {0x3, 0x85b, 0x1000}, {0x3, 0xecc, 0x3800}, {0x4, 0x7}, {0x4, 0x0, 0x1800}, {0x0, 0x2, 0x1000}, {0x4, 0x20, 0x1000}], 0x8, &(0x7f0000000180)={r2, r3+10000000}) semctl$GETZCNT(r1, 0x741ad5bdf2b7fe62, 0xf, 0x0) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000000)=""/212) 14:44:33 executing program 7: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x5, 0x80, 0x6, 0x20, 0x0, 0xfffffffffffffffa, 0x20, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000000), 0x3}, 0x8108, 0x0, 0x0, 0x5, 0x7, 0x2, 0x8, 0x0, 0xb86b, 0x0, 0x95d}, 0xffffffffffffffff, 0x5, r0, 0x2) 14:44:48 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) (fail_nth: 99) 14:44:48 executing program 2: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$setstatus(r0, 0x4, 0x0) pread64(r0, &(0x7f0000000000)=""/237, 0xed, 0xff) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:44:48 executing program 5: unshare(0x8000000) r0 = semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) r1 = semget$private(0x0, 0x6, 0x0) clock_gettime(0x0, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) semtimedop(r0, &(0x7f00000001c0)=[{0x2, 0x9, 0x1800}, {0x1, 0x100, 0x800}, {0x3, 0x85b, 0x1000}, {0x3, 0xecc, 0x3800}, {0x4, 0x7}, {0x4, 0x0, 0x1800}, {0x0, 0x2, 0x1000}, {0x4, 0x20, 0x1000}], 0x8, &(0x7f0000000180)={r2, r3+10000000}) semctl$GETZCNT(r1, 0x741ad5bdf2b7fe62, 0xf, 0x0) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000000)=""/212) 14:44:48 executing program 7: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget(0x0, 0x1, 0x600) r0 = semget$private(0x0, 0x3, 0x0) semctl$GETZCNT(r0, 0x741ad5bdf2b7fe62, 0xf, 0x0) r1 = semget$private(0x0, 0x2, 0x600) semctl$IPC_RMID(r1, 0x0, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r2, 0x4, 0x2400) fcntl$setstatus(r2, 0x4, 0x0) fcntl$getown(r2, 0x9) 14:44:48 executing program 0: unshare(0x18030100) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:44:48 executing program 4: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) unshare(0x8000500) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:44:48 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, 0x0}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:44:48 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) [ 1356.678848] FAULT_INJECTION: forcing a failure. [ 1356.678848] name failslab, interval 1, probability 0, space 0, times 0 [ 1356.680401] CPU: 0 PID: 8020 Comm: syz-executor.6 Not tainted 5.10.229 #1 [ 1356.681272] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1356.682285] Call Trace: [ 1356.682618] dump_stack+0x107/0x167 [ 1356.683072] should_fail.cold+0x5/0xa [ 1356.683554] ? create_object.isra.0+0x3a/0xa20 [ 1356.684131] should_failslab+0x5/0x20 [ 1356.684599] kmem_cache_alloc+0x5b/0x310 [ 1356.685122] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 1356.685865] create_object.isra.0+0x3a/0xa20 [ 1356.686404] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1356.687038] kmem_cache_alloc+0x159/0x310 [ 1356.687562] ptlock_alloc+0x1d/0x70 [ 1356.688017] pte_alloc_one+0x68/0x1a0 [ 1356.688489] __pte_alloc+0x1d/0x330 [ 1356.688955] remap_pfn_range_internal+0x9a3/0xf60 [ 1356.689590] ? apply_to_existing_page_range+0x40/0x40 [ 1356.690242] remap_pfn_range+0xcd/0x160 [ 1356.690735] ? remap_pfn_range_notrack+0x70/0x70 [ 1356.691318] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 1356.691972] io_uring_mmap+0x398/0x530 [ 1356.692460] mmap_region+0xb5a/0x1590 [ 1356.692961] do_mmap+0xcdb/0x11e0 [ 1356.693411] vm_mmap_pgoff+0x198/0x1f0 [ 1356.693903] ? randomize_page+0xb0/0xb0 [ 1356.694417] ksys_mmap_pgoff+0x41c/0x560 [ 1356.694924] ? find_mergeable_anon_vma+0x250/0x250 [ 1356.695536] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1356.696180] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1356.696820] do_syscall_64+0x33/0x40 [ 1356.697308] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1356.697951] RIP: 0033:0x7f13c0819b62 [ 1356.698412] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1356.700645] RSP: 002b:00007f13bdd8f0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1356.701595] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f13c0819b62 [ 1356.702467] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000020ffc000 [ 1356.703337] RBP: 0000000020ffc000 R08: 0000000000000005 R09: 0000000010000000 [ 1356.704209] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200001c0 [ 1356.705099] R13: 0000000020ffc000 R14: 0000000020000040 R15: 00000000200a0000 14:44:48 executing program 0: unshare(0x8000000) r0 = semget$private(0x0, 0x4000, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfffffffffffff000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) r1 = semget$private(0x0, 0x6, 0x0) unshare(0x0) semctl$GETZCNT(r1, 0x741ad5bdf2b7fe62, 0xf, 0x0) semtimedop(r1, &(0x7f0000000080)=[{0x4, 0x1f, 0x800}, {0x6, 0x8, 0x1800}], 0x2, &(0x7f00000000c0)={0x77359400}) semget$private(0x0, 0x3, 0x1c1) 14:44:48 executing program 2: unshare(0x8000000) unshare(0x68000000) r0 = semget$private(0x0, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x5e, 0x208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = semget$private(0x0, 0x1, 0x40) semctl$GETALL(r2, 0x0, 0xd, &(0x7f00000011c0)=""/234) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$FITRIM(r3, 0xc020662a, &(0x7f0000000080)={0x0, 0xfff7fffffffffff7}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r4, 0x4, 0x2400) fcntl$setstatus(r4, 0x4, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000001180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32=r4, @ANYBLOB="00002e2f66696c3f0dd0"]) semctl$GETNCNT(r2, 0x1, 0xe, &(0x7f0000000000)=""/219) semctl$IPC_RMID(0x0, 0x0, 0x10) semtimedop(r0, &(0x7f0000001100)=[{0x3, 0x8, 0x400}, {0x3, 0x3, 0x1800}, {0x2, 0x0, 0x1800}], 0x3, &(0x7f0000001140)={0x0, 0x989680}) semctl$SEM_INFO(r2, 0x3, 0x13, &(0x7f0000000100)=""/4096) 14:44:48 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, 0x0}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:44:48 executing program 4: unshare(0x8000000) unshare(0x40040900) semget$private(0x0, 0x4000, 0x0) unshare(0x20000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:44:48 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r3}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r3, 0x3400000000000000, 0x20, 0x1}) 14:44:48 executing program 7: ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000000)) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000040)={0x10001, 0x0, 0x80, 0x8, 0x1, "2031b3407461d133b003023266630a76d34fda", 0x26e4, 0x7}) unshare(0x8020000) 14:44:48 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) (fail_nth: 100) 14:44:48 executing program 0: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) fcntl$setstatus(r0, 0x4, 0x0) 14:44:48 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) [ 1356.963909] FAULT_INJECTION: forcing a failure. [ 1356.963909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1356.965435] CPU: 0 PID: 8060 Comm: syz-executor.6 Not tainted 5.10.229 #1 [ 1356.966273] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1356.967290] Call Trace: [ 1356.967625] dump_stack+0x107/0x167 [ 1356.968083] should_fail.cold+0x5/0xa [ 1356.968566] _copy_to_user+0x2e/0x180 [ 1356.969057] simple_read_from_buffer+0xcc/0x160 [ 1356.969643] proc_fail_nth_read+0x198/0x230 [ 1356.970183] ? proc_sessionid_read+0x230/0x230 [ 1356.970749] ? security_file_permission+0xb1/0xe0 [ 1356.971355] ? proc_sessionid_read+0x230/0x230 [ 1356.971921] vfs_read+0x228/0x620 [ 1356.972365] ksys_read+0x12d/0x260 [ 1356.972808] ? vfs_write+0xb10/0xb10 [ 1356.973295] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1356.973946] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1356.974591] do_syscall_64+0x33/0x40 [ 1356.975055] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1356.975686] RIP: 0033:0x7f13c07cc69c [ 1356.976149] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1356.978419] RSP: 002b:00007f13bdd8f170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1356.979355] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f13c07cc69c [ 1356.980230] RDX: 000000000000000f RSI: 00007f13bdd8f1e0 RDI: 0000000000000004 [ 1356.981122] RBP: 00007f13bdd8f1d0 R08: 0000000000000000 R09: 0000000010000000 [ 1356.981996] R10: 0000000000008011 R11: 0000000000000246 R12: 0000000000000003 [ 1356.982870] R13: 00007ffd54c2515f R14: 00007f13bdd8f300 R15: 0000000000022000 14:44:48 executing program 4: unshare(0x8000000) unshare(0x4010000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) r0 = semget$private(0x0, 0x4, 0x13) unshare(0x12020000) semctl$IPC_RMID(r0, 0x0, 0x0) 14:44:48 executing program 2: unshare(0x8000000) r0 = semget$private(0x0, 0x4000, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfffffffffffff000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) r1 = semget$private(0x0, 0x6, 0x0) unshare(0x0) semctl$GETZCNT(r1, 0x741ad5bdf2b7fe62, 0xf, 0x0) semtimedop(r1, &(0x7f0000000080)=[{0x4, 0x1f, 0x800}, {0x6, 0x8, 0x1800}], 0x2, &(0x7f00000000c0)={0x77359400}) semget$private(0x0, 0x3, 0x1c1) 14:44:48 executing program 5: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget(0x0, 0x1, 0x600) r0 = semget$private(0x0, 0x3, 0x0) semctl$GETZCNT(r0, 0x741ad5bdf2b7fe62, 0xf, 0x0) r1 = semget$private(0x0, 0x2, 0x600) semctl$IPC_RMID(r1, 0x0, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r2, 0x4, 0x2400) fcntl$setstatus(r2, 0x4, 0x0) fcntl$getown(r2, 0x9) 14:44:48 executing program 4: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x11000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x92c, 0x7936}, 0x10200, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:44:48 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:44:48 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r3}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r3, 0x3400000000000000, 0x20, 0x1}) 14:45:02 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:45:02 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb, 0x30, 0xffffffffffffffff, 0x0) r1 = fork() ptrace$setopts(0x4206, r1, 0x10001, 0x3d) ptrace(0x10, r1) r2 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r1, 0x0, 0xffffffffffffffff, 0x1) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r2, r3) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd, 0x0, 0x0, 0x0, {0x8000}}, 0x8) mount$9p_unix(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x1001000, &(0x7f00000001c0)=ANY=[@ANYBLOB="9c45cb289520a000000000000003ff4477258c59b47e45f5af7c6cc58be2912302a30a941821400c62f07f0d7da90830e4106ca54d64133ef17d282b6c60cfc0d7e9809d843becbf9f45447d1d03292cc66d4f40da3d4f18f164c340d9f2e3cb1be7a1e79c63edf5295e9b9f5cf71c3556d8d1d0e0bde6f33ed0e759b269705d1d60e77474c68805ca9675f46ecb4ac49f4f25ff22d3d60e44dda2c3b1e4179404918e1506558fabe374f9dbf91c00"/185]) ptrace$setregset(0x4205, r1, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:45:02 executing program 4: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20000000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$setstatus(r0, 0x4, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000000)) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:45:02 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:45:02 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xdc, 0x2, 0x5, 0x0, 0x70bd2b, 0x25dfdbfe, {0xa, 0x0, 0x8}, [@typed={0x4, 0x54}, @generic="b4439b86cce007e05e0c05c8f66f451c4c0b9446241340ba2c9ef15472b03fd4b0498128f58d8219d0a89ce38fba937c933c7418d97e86d92c2981a7710807cc1bd31b09c21cc92cbb2e9955dc8d930ed5e4b3ff68a197fed9b390498f9be0c2b9a4682359091c83d98dc84d4f5e7dad1c87861beb7205d2955aa3e041bc4db02159d04827bfb717d9346ffd8595042492abd38afcd94dad44cf50b10cdfb70fdc69b8149a4f7299a03ba4c3f58b3f8f8aeef877ed34f41a92acfdbf437a2ee6c8"]}, 0xdc}, 0x1, 0x0, 0x0, 0x44000}, 0x4) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$FITRIM(r0, 0xc020662a, &(0x7f0000000080)={0x0, 0xfff7fffffffffff7}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, 0x0) mq_notify(r0, &(0x7f0000000380)={0x0, 0x23, 0x0, @thr={&(0x7f00000001c0)="a91ea03e853a0ff6007b10700cad11701704c89005c0f4a6ddc9855cb5094dd4af0d13f3099d6cbd00378cc9c12e2a038ad09822952963dcb270d734dd1bb0bf30249b02a76e550daa449ac065ed618b3aa9d78e455554fb6ab6c156938b9789becf4b02f29eb869b18f181e989393630b310b711bbca7bc506c9e0016f7acb8ebf8c22b831b2737190edf888eaa6ed8f7abb581d7", &(0x7f0000000280)="e673f72297014c8183d2fc5c9af6f48016d9cec8a078eef99114295e2986c24adf81383e4b37762288e2978e8aaba529b1d878c353d67ab14f15402e14f8b143e25d0951b2d078b9becd45b696e944a3378ce7454159b69ded60d0bb8178a954923ee273575361e1b9a709d13865a364880ba14d6111053bf444947680a77c9a32979b6898bc8f6e0fd3a718729d0af87c0046a2ff87f6745598e07cc399f2f491ff25a45655cec1fa4ec4800e5022b1e9584b077463d7c0251a1b749c89e3a3355f3183479d3a8c2fcf12d0a9095fb1aa3bea4d4ea5bf"}}) semctl$IPC_RMID(0x0, 0x0, 0x10) unshare(0x40100) 14:45:02 executing program 5: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget(0x0, 0x1, 0x600) r0 = semget$private(0x0, 0x3, 0x0) semctl$GETZCNT(r0, 0x741ad5bdf2b7fe62, 0xf, 0x0) r1 = semget$private(0x0, 0x2, 0x600) semctl$IPC_RMID(r1, 0x0, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r2, 0x4, 0x2400) fcntl$setstatus(r2, 0x4, 0x0) fcntl$getown(r2, 0x9) 14:45:02 executing program 7: prctl$PR_PAC_RESET_KEYS(0x36, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$FITRIM(r0, 0xc020662a, &(0x7f0000000080)={0x0, 0xfff7fffffffffff7}) r1 = semget$private(0x0, 0x6, 0x0) semctl$GETZCNT(r1, 0x741ad5bdf2b7fe62, 0xf, 0x0) semtimedop(r1, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x0, 0x989680}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, 0x0) perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) unshare(0x0) 14:45:02 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:45:02 executing program 7: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x200) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:45:02 executing program 0: semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x5, 0x80, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:45:02 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:45:16 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:45:16 executing program 4: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000040)) unshare(0x8000000) semget$private(0x0, 0x3, 0x348) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:45:16 executing program 7: unshare(0x8000000) r0 = syz_io_uring_setup(0x7893, &(0x7f0000000080)={0x0, 0x0, 0xe, 0x200}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f0000000180)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)=ANY=[@ANYBLOB="01000043cdccf8cc1ad0ebdb0c7139ec6b272b5033ef0001", @ANYRES32=r0, @ANYRES32, @ANYBLOB="000000002e2f666961653000acebea4cc7f3b3491041fba31c3c9d5df602e8d907cb53fd9549f57c8f9b2f28984cb3491f0f8bab533296caf1ed970d75b8697bc4cbf9eca5f82cc586086bcfd2f13469801ed8907134c3cb51a0b794b3ab625ea139f31db59c9596def4aaf8659cb9176f1863518debe6219672bbac67dd6a9293a56f4e47322655890cad9da14dc0fd35f2ef86899da0b46a196246e437ed7ae6c9c30e18924141e1e0ef388ecb78bb9ab4d2d596fabc4cdb83fe3c0600000000000000"]) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="8665f4fb2d950d77e18844ce633b71ae76e49e5624cfedb2942f8c4dd5fb89ec47993abb6e800beb0fa8d43d86829cef0d2089077df6678e055a06fc0c21dda62863a642a0de798b1cd33e11be2458d729b41c97bcca2c3c202f01ab88369ce2fb2c981d1a05c57dc8e99a2d8602b3e2b2eed082d772d69047be8506c10f24421fedbe472a3fc0678a7752146fc9f1b8cbe68dc2503ee9711d765da3ea27032ad149f0841628167be26b74a9dd94d3b672fb1b434c3fb407", @ANYBLOB=',wfdno=', @ANYRESHEX]) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000140)={0x1, 0x9, 0x48c5}) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000040)={'lo\x00', {0x2, 0x0, @multicast2}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) pipe2(&(0x7f0000000380), 0x4000) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x1a, 0x7f, @udp='udp:syz1\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4004003}, 0x4044814) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x30) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x495c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x14, 0x1d, 0xc21, 0x0, 0x0, {0x44, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x8000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:45:16 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb, 0x30, 0xffffffffffffffff, 0x0) r1 = fork() ptrace$setopts(0x4206, r1, 0x10001, 0x3d) ptrace(0x10, r1) r2 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r1, 0x0, 0xffffffffffffffff, 0x1) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r2, r3) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd, 0x0, 0x0, 0x0, {0x8000}}, 0x8) mount$9p_unix(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x1001000, &(0x7f00000001c0)=ANY=[@ANYBLOB="9c45cb289520a000000000000003ff4477258c59b47e45f5af7c6cc58be2912302a30a941821400c62f07f0d7da90830e4106ca54d64133ef17d282b6c60cfc0d7e9809d843becbf9f45447d1d03292cc66d4f40da3d4f18f164c340d9f2e3cb1be7a1e79c63edf5295e9b9f5cf71c3556d8d1d0e0bde6f33ed0e759b269705d1d60e77474c68805ca9675f46ecb4ac49f4f25ff22d3d60e44dda2c3b1e4179404918e1506558fabe374f9dbf91c00"/185]) ptrace$setregset(0x4205, r1, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:45:16 executing program 5: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget(0x0, 0x1, 0x600) r0 = semget$private(0x0, 0x3, 0x0) semctl$GETZCNT(r0, 0x741ad5bdf2b7fe62, 0xf, 0x0) r1 = semget$private(0x0, 0x2, 0x600) semctl$IPC_RMID(r1, 0x0, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r2, 0x4, 0x2400) fcntl$setstatus(r2, 0x4, 0x0) fcntl$getown(r2, 0x9) 14:45:16 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x2, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:45:16 executing program 0: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x6, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x8, @empty, 0xffff}, 0x1c) semctl$GETZCNT(r0, 0x741ad5bdf2b7fe62, 0xf, 0x0) unshare(0x36020000) semget$private(0x0, 0x3, 0x80) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:45:16 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:45:16 executing program 4: unshare(0x8000000) r0 = semget$private(0x0, 0x4000, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000000)=0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$FITRIM(r2, 0xc020662a, &(0x7f0000000080)={0x0, 0xfff7fffffffffff7}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, 0x0) io_uring_enter(r2, 0x7791, 0x251b, 0x2, &(0x7f0000000040)={[0xfffffffffffff801]}, 0x8) semctl$IPC_RMID(0x0, 0x0, 0x10) semop(r0, &(0x7f00000000c0)=[{0x0, 0x9b2, 0x1000}, {0x0, 0xfffa, 0x1400}], 0x2) 14:45:30 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x4, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:45:30 executing program 7: unshare(0x8000000) semget$private(0x0, 0x0, 0x100) unshare(0x14000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) unshare(0x52000880) 14:45:30 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb, 0x30, 0xffffffffffffffff, 0x0) r1 = fork() ptrace$setopts(0x4206, r1, 0x10001, 0x3d) ptrace(0x10, r1) r2 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r1, 0x0, 0xffffffffffffffff, 0x1) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r2, r3) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd, 0x0, 0x0, 0x0, {0x8000}}, 0x8) mount$9p_unix(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x1001000, &(0x7f00000001c0)=ANY=[@ANYBLOB="9c45cb289520a000000000000003ff4477258c59b47e45f5af7c6cc58be2912302a30a941821400c62f07f0d7da90830e4106ca54d64133ef17d282b6c60cfc0d7e9809d843becbf9f45447d1d03292cc66d4f40da3d4f18f164c340d9f2e3cb1be7a1e79c63edf5295e9b9f5cf71c3556d8d1d0e0bde6f33ed0e759b269705d1d60e77474c68805ca9675f46ecb4ac49f4f25ff22d3d60e44dda2c3b1e4179404918e1506558fabe374f9dbf91c00"/185]) ptrace$setregset(0x4205, r1, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:45:30 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:45:30 executing program 5: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget(0x0, 0x1, 0x600) r0 = semget$private(0x0, 0x3, 0x0) semctl$GETZCNT(r0, 0x741ad5bdf2b7fe62, 0xf, 0x0) r1 = semget$private(0x0, 0x2, 0x600) semctl$IPC_RMID(r1, 0x0, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r2, 0x4, 0x2400) fcntl$getown(r2, 0x9) 14:45:30 executing program 0: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x400) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7, 0x5, 0x1, 0x0, 0x0, 0x79, 0x4000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0x2, 0x1}, 0x1000, 0x96c3, 0x8, 0x3, 0x3, 0x0, 0x8, 0x0, 0xfffffff9, 0x0, 0x2}, 0x0, 0xf, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x28, 0x1a, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0xc, 0x1d, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xffffffffffffffff}]}]}, 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000100)=""/25, 0x19}, {&(0x7f0000000140)=""/58, 0x3a}, {&(0x7f0000000180)=""/136, 0x88}, {&(0x7f0000000240)=""/12, 0xc}, {&(0x7f0000000280)=""/183, 0xb7}, {&(0x7f0000000340)=""/117, 0x75}, {&(0x7f00000003c0)=""/185, 0xb9}, {&(0x7f0000000480)=""/177, 0xb1}], 0x8, &(0x7f00000005c0)=""/109, 0x6d}, 0x2}], 0x1, 0x3, &(0x7f0000000680)={0x0, 0x3938700}) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:45:30 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:45:30 executing program 4: unshare(0x8000000) unshare(0x14000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) [ 1398.752923] netlink: 'syz-executor.0': attribute type 29 has an invalid length. 14:45:30 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x5, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:45:30 executing program 7: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x0, 0x80, 0x40, 0x2, 0x0, 0x1, 0x40104, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_bp, 0x12, 0x1000, 0x6, 0x3, 0x3, 0x3ff, 0x4, 0x0, 0x8, 0x0, 0xff}, 0xffffffffffffffff, 0x9, r1, 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:45:30 executing program 5: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget(0x0, 0x1, 0x600) r0 = semget$private(0x0, 0x3, 0x0) semctl$GETZCNT(r0, 0x741ad5bdf2b7fe62, 0xf, 0x0) r1 = semget$private(0x0, 0x2, 0x600) semctl$IPC_RMID(r1, 0x0, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getown(r2, 0x9) 14:45:30 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:45:30 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:45:30 executing program 4: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x2, 0x1, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:45:30 executing program 0: semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0xff, 0x2, 0x0, 0x80, 0x0, 0x2000000000005b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x3022, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:45:30 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb, 0x30, 0xffffffffffffffff, 0x0) r1 = fork() ptrace$setopts(0x4206, r1, 0x10001, 0x3d) ptrace(0x10, r1) r2 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r1, 0x0, 0xffffffffffffffff, 0x1) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r2, r3) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd, 0x0, 0x0, 0x0, {0x8000}}, 0x8) ptrace$setregset(0x4205, r1, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:45:30 executing program 5: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget(0x0, 0x1, 0x600) r0 = semget$private(0x0, 0x3, 0x0) semctl$GETZCNT(r0, 0x741ad5bdf2b7fe62, 0xf, 0x0) r1 = semget$private(0x0, 0x2, 0x600) semctl$IPC_RMID(r1, 0x0, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getown(r2, 0x9) 14:45:30 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x6, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:45:30 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff0000"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:45:45 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:45:45 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb, 0x30, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:45:45 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x8, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:45:45 executing program 4: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r0 = semget$private(0x0, 0x6, 0x0) semctl$GETZCNT(r0, 0x741ad5bdf2b7fe62, 0xf, 0x0) semop(r0, &(0x7f00000000c0)=[{0x1, 0x6, 0x1800}, {0x2, 0x0, 0x1800}], 0x2) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(r0, &(0x7f0000000100)=[{0x0, 0xc000}, {0x0, 0x0, 0x800}, {0x4, 0xffff, 0x1800}, {0x0, 0x101, 0x1800}, {0x2, 0x6, 0xdcd9003ebf1ecd5}, {0x1, 0x800, 0x800}, {0x0, 0x400, 0x1000}, {0x0, 0x19}, {0x0, 0x1, 0xcd5fbf6e8b24d8d4}], 0x9) semctl$IPC_RMID(0x0, 0x0, 0x10) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0xd2) r1 = semget$private(0x0, 0x6, 0x0) semctl$GETZCNT(r1, 0x741ad5bdf2b7fe62, 0xf, 0x0) semctl$SEM_INFO(r1, 0x1, 0x13, &(0x7f0000000000)=""/163) 14:45:45 executing program 7: setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='veth0_macvtap\x00', 0x10) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r0, 0x10, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x8}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @random="5e4b2b48a087"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:45:45 executing program 0: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r0 = semget$private(0x0, 0x0, 0x8) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x3, 0x7ff, 0x1000}, {0x2, 0x32a7, 0x1800}, {0x0, 0x8, 0x1000}, {0x0, 0xeee, 0x1800}, {0x4, 0x3, 0x1000}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x2, 0x1800}, {0x0, 0x7ff, 0x1800}], 0x9, &(0x7f0000000080)={r1, r2+10000000}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:45:45 executing program 5: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget(0x0, 0x1, 0x600) r0 = semget$private(0x0, 0x3, 0x0) semctl$GETZCNT(r0, 0x741ad5bdf2b7fe62, 0xf, 0x0) r1 = semget$private(0x0, 0x2, 0x600) semctl$IPC_RMID(r1, 0x0, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getown(r2, 0x9) 14:45:45 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff0000"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:45:45 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff0000"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:45:45 executing program 5: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget(0x0, 0x1, 0x600) r0 = semget$private(0x0, 0x3, 0x0) semctl$GETZCNT(r0, 0x741ad5bdf2b7fe62, 0xf, 0x0) r1 = semget$private(0x0, 0x2, 0x600) semctl$IPC_RMID(r1, 0x0, 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400) fcntl$getown(0xffffffffffffffff, 0x9) 14:45:45 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:45:45 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0xc, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:45:45 executing program 0: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x16, 0x40, 0x81, 0x1, 0x0, 0x401, 0x10000, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb72a, 0x6fefc76693c1922f, @perf_config_ext={0xfffffffffffffffe, 0x2}, 0x40d44, 0x2, 0x80, 0x4, 0x4, 0x66e, 0x5, 0x0, 0x2, 0x0, 0x80000000}, 0xffffffffffffffff, 0x6, r0, 0x1) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:45:45 executing program 7: unshare(0x8000000) unshare(0x44010200) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:45:45 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb, 0x30, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:46:00 executing program 4: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semget$private(0x0, 0x3, 0x40) unshare(0x20200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x3a8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:46:00 executing program 5: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget(0x0, 0x1, 0x600) r0 = semget$private(0x0, 0x3, 0x0) semctl$GETZCNT(r0, 0x741ad5bdf2b7fe62, 0xf, 0x0) r1 = semget$private(0x0, 0x2, 0x600) semctl$IPC_RMID(r1, 0x0, 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400) fcntl$getown(0xffffffffffffffff, 0x9) 14:46:00 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb, 0x30, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:46:00 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:46:00 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r5}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r5, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r6, 0x40046629, &(0x7f0000000040)) 14:46:00 executing program 0: unshare(0x8000000) unshare(0x10000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:46:00 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x10, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:46:00 executing program 7: unshare(0x8000000) unshare(0x600) semget$private(0x0, 0x4000, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x9]}, 0x8, 0x800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0xfffffffd}, 0x0, 0x6, r0, 0x0) r1 = semget$private(0x0, 0x4, 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) r2 = semget$private(0x0, 0x6, 0x0) semctl$GETZCNT(r2, 0x741ad5bdf2b7fe62, 0xf, 0x0) semctl$GETZCNT(r2, 0x3, 0xf, &(0x7f0000000000)=""/111) 14:46:00 executing program 5: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget(0x0, 0x1, 0x600) r0 = semget$private(0x0, 0x3, 0x0) semctl$GETZCNT(r0, 0x741ad5bdf2b7fe62, 0xf, 0x0) r1 = semget$private(0x0, 0x2, 0x600) semctl$IPC_RMID(r1, 0x0, 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400) fcntl$getown(0xffffffffffffffff, 0x9) 14:46:01 executing program 7: unshare(0x8000000) r0 = semget$private(0x0, 0x4000, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) unshare(0x8050600) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000140)={{0x0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0x20}, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:46:01 executing program 4: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) r0 = semget$private(0x0, 0x6, 0x0) semctl$GETZCNT(r0, 0x741ad5bdf2b7fe62, 0xf, 0x0) semop(r0, &(0x7f0000000000)=[{0x0, 0x6, 0x1800}, {0x4, 0x7, 0x1000}, {0x3, 0x2, 0x1800}, {0x4, 0x6, 0x1000}, {0x1, 0x9, 0x800}, {0x2, 0x7fff, 0x1800}], 0x6) 14:46:01 executing program 7: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$FITRIM(r1, 0xc020662a, &(0x7f0000000080)={0x0, 0xfff7fffffffffff7}) unshare(0x48000080) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x80, 0x2, 0x9c, 0x2, 0x81, 0x0, 0x0, 0x203, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xae, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x1050, 0x3, 0x6, 0x0, 0x9254, 0x10001, 0x20, 0x0, 0x360a0000, 0x0, 0x7}, r1, 0x1, r2, 0x0) 14:46:01 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:46:01 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r5}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r5, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r6, 0x40046629, &(0x7f0000000040)) 14:46:01 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb, 0x30, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) ptrace(0x10, r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:46:01 executing program 5: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget(0x0, 0x1, 0x600) r0 = semget$private(0x0, 0x3, 0x0) semctl$GETZCNT(r0, 0x741ad5bdf2b7fe62, 0xf, 0x0) semget$private(0x0, 0x2, 0x600) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r1, 0x4, 0x2400) fcntl$getown(r1, 0x9) 14:46:01 executing program 0: unshare(0x8000880) r0 = semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x70829db3e2de82b}, 0x0, 0x0, 0x0, 0x0, 0x5, 0xd83}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4) semctl$IPC_RMID(0x0, 0x0, 0x10) semctl$SEM_INFO(r0, 0x2, 0x13, &(0x7f0000000000)=""/242) r1 = semget$private(0x0, 0x6, 0x0) semctl$GETZCNT(r1, 0x741ad5bdf2b7fe62, 0xf, 0x0) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000100)=""/146) 14:46:15 executing program 7: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb, 0x30, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) ptrace(0x10, r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:46:15 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb, 0x30, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) ptrace(0x10, r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:46:15 executing program 4: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) r0 = semget$private(0x0, 0x6, 0x0) semctl$GETZCNT(r0, 0x741ad5bdf2b7fe62, 0xf, 0x0) semop(r0, &(0x7f0000000000)=[{0x0, 0x6, 0x1800}, {0x4, 0x7, 0x1000}, {0x3, 0x2, 0x1800}, {0x4, 0x6, 0x1000}, {0x1, 0x9, 0x800}, {0x2, 0x7fff, 0x1800}], 0x6) 14:46:15 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:46:15 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r5}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r5, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r6, 0x40046629, &(0x7f0000000040)) 14:46:15 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x12, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:46:15 executing program 0: unshare(0xc000000) unshare(0x20000) r0 = semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) semtimedop(r0, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={r1, r2+10000000}) r3 = semget$private(0x0, 0x2, 0x220) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r3, &(0x7f0000000000)=[{0x2, 0x1b, 0x1800}, {0x3, 0x54, 0x3800}, {0x4, 0x960, 0x800}, {0x4, 0x3, 0x1000}, {0x3, 0x7}], 0x5, &(0x7f0000000080)={r4, r5+10000000}) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:46:15 executing program 5: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget(0x0, 0x1, 0x600) r0 = semget$private(0x0, 0x3, 0x0) semctl$GETZCNT(r0, 0x741ad5bdf2b7fe62, 0xf, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r1, 0x4, 0x2400) fcntl$getown(r1, 0x9) 14:46:15 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:46:15 executing program 5: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget(0x0, 0x1, 0x600) semget$private(0x0, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x9) 14:46:15 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x18, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:46:15 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={0x0, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r6, 0x40046629, &(0x7f0000000040)) 14:46:15 executing program 4: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget(0x0, 0x1, 0x600) r0 = semget$private(0x0, 0x3, 0x0) semctl$GETZCNT(r0, 0x741ad5bdf2b7fe62, 0xf, 0x0) r1 = semget$private(0x0, 0x2, 0x600) semctl$IPC_RMID(r1, 0x0, 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400) fcntl$getown(0xffffffffffffffff, 0x9) 14:46:15 executing program 7: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget(0x0, 0x1, 0x600) r0 = semget$private(0x0, 0x3, 0x0) semctl$GETZCNT(r0, 0x741ad5bdf2b7fe62, 0xf, 0x0) r1 = semget$private(0x0, 0x2, 0x600) semctl$IPC_RMID(r1, 0x0, 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400) fcntl$getown(0xffffffffffffffff, 0x9) 14:46:15 executing program 0: unshare(0x8000000) r0 = semget$private(0x0, 0x4000, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f00000000c0)=[{0x0, 0x9, 0x400}, {0x4, 0xfff, 0x1000}, {0x3, 0x7fff, 0x800}, {0x4, 0x37, 0x1800}, {0x2, 0x441, 0x800}, {0x0, 0x8001, 0x400}, {0x0, 0xfffc, 0x1000}, {0x4, 0x424, 0x1000}], 0x8, &(0x7f0000000100)) mq_timedsend(0xffffffffffffffff, &(0x7f00000001c0)="041fdfe3c5c918cbe26405d94f612e43443fc0e33be9d6e2bf267deec64d3669ba0e6c9bf50c976dc475b70eb6fb62ab4cdd0d5ed6fc4c191aacada7414a75a0cf8a3bd5c3d31bb7ea998b7be231ef9e3fede09cdfd654c56c79b94dd3ba0ef5cb6c24de06", 0x65, 0x8, &(0x7f0000000240)={0x0, 0x989680}) semtimedop(r0, &(0x7f0000000140)=[{0x7, 0x7, 0x800}, {0x1, 0xb4, 0x1800}, {0x4, 0x1, 0x1800}, {0x4, 0xffc1, 0x3800}, {0x4, 0x6, 0x800}, {0x4, 0x7, 0x1800}], 0x6, &(0x7f0000000180)={0x0, 0x989680}) semtimedop(0xffffffffffffffff, &(0x7f0000000000)=[{0x3, 0x9, 0x800}, {0x4, 0x100, 0x1000}, {0x2, 0x80}, {0x2, 0xa000, 0x1000}, {0x1, 0x7fff, 0x1000}, {0x4, 0xddc1, 0x1800}, {0x3, 0x40, 0x800}, {0x3, 0x0, 0x1000}, {0x2, 0x800}], 0x9, &(0x7f0000000080)={r1, r2+60000000}) perf_event_open(&(0x7f0000001d80)={0x1, 0xfffffffffffffdf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) semctl$IPC_RMID(r0, 0x0, 0x0) 14:46:15 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:46:15 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x1e, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:46:15 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb, 0x30, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) ptrace(0x10, r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:46:15 executing program 4: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb, 0x30, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) ptrace(0x10, r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:46:31 executing program 4: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb, 0x30, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) ptrace(0x10, r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:46:31 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb, 0x30, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) dup2(r1, 0xffffffffffffffff) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:46:31 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:46:31 executing program 7: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget(0x0, 0x1, 0x600) r0 = semget$private(0x0, 0x3, 0x0) semctl$GETZCNT(r0, 0x741ad5bdf2b7fe62, 0xf, 0x0) r1 = semget$private(0x0, 0x2, 0x600) semctl$IPC_RMID(r1, 0x0, 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400) fcntl$getown(0xffffffffffffffff, 0x9) 14:46:31 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={0x0, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r6, 0x40046629, &(0x7f0000000040)) 14:46:31 executing program 0: unshare(0x8000000) r0 = semget$private(0x0, 0x4000, 0x0) r1 = semget$private(0x0, 0x6, 0x0) unshare(0xa020000) semctl$GETZCNT(r1, 0x741ad5bdf2b7fe62, 0xf, 0x0) r2 = semget(0x2, 0x2, 0x12) semop(r2, &(0x7f0000000180)=[{0x2, 0x4, 0x1800}, {0x1, 0x8, 0x3c00}], 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000080)=[{0x2, 0x200, 0x1000}, {0x0, 0xde, 0x1000}], 0x2, &(0x7f0000000100)={r3, r4+10000000}) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r8, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r5, 0x58ab, 0x0, 0x0, 0x0, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x1c) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) semctl$IPC_RMID(0x0, 0x0, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4a2cc1, 0x192) 14:46:31 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x24, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:46:31 executing program 5: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget(0x0, 0x1, 0x600) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x9) 14:46:31 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:46:31 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={0x0, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r6, 0x40046629, &(0x7f0000000040)) [ 1459.963671] process 'syz-executor.0' launched '/dev/fd/-1' with NULL argv: empty string added 14:46:31 executing program 7: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget(0x0, 0x1, 0x600) semget$private(0x0, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x9) 14:46:31 executing program 4: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget(0x0, 0x1, 0x600) r0 = semget$private(0x0, 0x3, 0x0) semctl$GETZCNT(r0, 0x741ad5bdf2b7fe62, 0xf, 0x0) r1 = semget$private(0x0, 0x2, 0x600) semctl$IPC_RMID(r1, 0x0, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getown(r2, 0x9) 14:46:46 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x2a, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:46:46 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb, 0x30, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) dup2(r1, 0xffffffffffffffff) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:46:46 executing program 5: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x9) 14:46:46 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:46:46 executing program 4: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb, 0x30, 0xffffffffffffffff, 0x0) r1 = fork() ptrace$setopts(0x4206, r1, 0x10001, 0x3d) ptrace(0x10, r1) r2 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r1, 0x0, 0xffffffffffffffff, 0x1) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r2, r3) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd, 0x0, 0x0, 0x0, {0x8000}}, 0x8) ptrace$setregset(0x4205, r1, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:46:46 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r5}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r5, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r6, 0x40046629, &(0x7f0000000040)) 14:46:46 executing program 7: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget(0x0, 0x1, 0x600) r0 = semget$private(0x0, 0x3, 0x0) semctl$GETZCNT(r0, 0x741ad5bdf2b7fe62, 0xf, 0x0) r1 = semget$private(0x0, 0x2, 0x600) semctl$IPC_RMID(r1, 0x0, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getown(r2, 0x9) 14:46:46 executing program 0: unshare(0x8000000) unshare(0x10010200) unshare(0x8000080) r0 = semget$private(0x0, 0x4000, 0x0) unshare(0x2000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) semctl$IPC_RMID(r0, 0x0, 0x0) 14:46:46 executing program 5: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x9) 14:46:46 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:46:46 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x30, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:46:46 executing program 7: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x400) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7, 0x5, 0x1, 0x0, 0x0, 0x79, 0x4000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0x2, 0x1}, 0x1000, 0x96c3, 0x8, 0x3, 0x3, 0x0, 0x8, 0x0, 0xfffffff9, 0x0, 0x2}, 0x0, 0xf, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x28, 0x1a, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0xc, 0x1d, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xffffffffffffffff}]}]}, 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000100)=""/25, 0x19}, {&(0x7f0000000140)=""/58, 0x3a}, {&(0x7f0000000180)=""/136, 0x88}, {&(0x7f0000000240)=""/12, 0xc}, {&(0x7f0000000280)=""/183, 0xb7}, {&(0x7f0000000340)=""/117, 0x75}, {&(0x7f00000003c0)=""/185, 0xb9}, {&(0x7f0000000480)=""/177, 0xb1}], 0x8, &(0x7f00000005c0)=""/109, 0x6d}, 0x2}], 0x1, 0x3, &(0x7f0000000680)={0x0, 0x3938700}) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:46:46 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb, 0x30, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) dup2(r1, 0xffffffffffffffff) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:46:46 executing program 5: unshare(0x8000000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x9) 14:46:46 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r5}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r5, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r6, 0x40046629, &(0x7f0000000040)) 14:46:46 executing program 0: unshare(0x8000000) semget$private(0x0, 0x4004, 0x282) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) [ 1474.762756] netlink: 'syz-executor.7': attribute type 29 has an invalid length. 14:47:01 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:47:01 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x36, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:47:01 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb, 0x30, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) ptrace(0x10, r0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(0xffffffffffffffff, r1) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:47:01 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x9) 14:47:01 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:47:01 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:47:01 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r5}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r5, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r6, 0x40046629, &(0x7f0000000040)) 14:47:01 executing program 7: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget(0x0, 0x1, 0x600) r0 = semget$private(0x0, 0x3, 0x0) semctl$GETZCNT(r0, 0x741ad5bdf2b7fe62, 0xf, 0x0) r1 = semget$private(0x0, 0x2, 0x600) semctl$IPC_RMID(r1, 0x0, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r2, 0x4, 0x2400) fcntl$getown(r2, 0x9) 14:47:02 executing program 7: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb, 0x30, 0xffffffffffffffff, 0x0) r1 = fork() ptrace$setopts(0x4206, r1, 0x10001, 0x3d) ptrace(0x10, r1) r2 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r1, 0x0, 0xffffffffffffffff, 0x1) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r2, r3) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd, 0x0, 0x0, 0x0, {0x8000}}, 0x8) mount$9p_unix(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x1001000, &(0x7f00000001c0)=ANY=[@ANYBLOB="9c45cb289520a000000000000003ff4477258c59b47e45f5af7c6cc58be2912302a30a941821400c62f07f0d7da90830e4106ca54d64133ef17d282b6c60cfc0d7e9809d843becbf9f45447d1d03292cc66d4f40da3d4f18f164c340d9f2e3cb1be7a1e79c63edf5295e9b9f5cf71c3556d8d1d0e0bde6f33ed0e759b269705d1d60e77474c68805ca9675f46ecb4ac49f4f25ff22d3d60e44dda2c3b1e4179404918e1506558fabe374f9dbf91c00"/185]) ptrace$setregset(0x4205, r1, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:47:02 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x3c, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:47:02 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x9) 14:47:02 executing program 4: unshare(0x8000000) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x13, 0xffffffffffffffff, 0x8000000) r1 = syz_io_uring_setup(0x1d, &(0x7f0000000100), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0xfc292a8c574ae91a}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffff9c, &(0x7f0000000000)={0x800, 0x40, 0x17}, &(0x7f0000000040)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r4}}, 0x5) unshare(0x2000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r6, 0x4, 0x2400) fcntl$setstatus(r6, 0x4, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r7 = memfd_create(&(0x7f0000000240)='!\xce}\x00', 0x4) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f00000002c0)={{r7}, "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"}) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, r5, &(0x7f00000001c0), r6, 0x3, 0x0, 0x1, {0x0, r8}}, 0x5) 14:47:02 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb, 0x30, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) ptrace(0x10, r0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(0xffffffffffffffff, r1) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:47:02 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:47:02 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:47:16 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400) fcntl$getown(r0, 0x9) 14:47:16 executing program 7: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = semget(0x3, 0x4, 0x40) semtimedop(r0, &(0x7f0000000000)=[{0x3, 0x5, 0x1000}, {0x2, 0x0, 0x800}, {0x1, 0x200, 0x1000}, {0x2, 0x100, 0x1000}, {0x2, 0x5, 0x800}, {0x3, 0xf44, 0x1800}, {0x4, 0x7f, 0x800}], 0x7, &(0x7f0000000040)) r1 = semget$private(0x0, 0x6, 0x0) semctl$GETZCNT(r1, 0x741ad5bdf2b7fe62, 0xf, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)) r2 = semget$private(0x0, 0x6, 0x0) semctl$GETZCNT(r2, 0x741ad5bdf2b7fe62, 0xf, 0x0) r3 = semget(0x2, 0x1, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) unshare(0x2000400) semop(r2, &(0x7f0000000080)=[{0x2, 0xfff7, 0x800}, {0x2, 0x8, 0x1000}, {0x3, 0xffff}, {0x4, 0x2, 0x1800}, {0x0, 0x4, 0x800}], 0x5) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:47:16 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:47:16 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:47:16 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x42, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:47:16 executing program 4: unshare(0x8000000) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x13, 0xffffffffffffffff, 0x8000000) r1 = syz_io_uring_setup(0x1d, &(0x7f0000000100), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0xfc292a8c574ae91a}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffff9c, &(0x7f0000000000)={0x800, 0x40, 0x17}, &(0x7f0000000040)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r4}}, 0x5) unshare(0x2000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r6, 0x4, 0x2400) fcntl$setstatus(r6, 0x4, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r7 = memfd_create(&(0x7f0000000240)='!\xce}\x00', 0x4) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f00000002c0)={{r7}, "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"}) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, r5, &(0x7f00000001c0), r6, 0x3, 0x0, 0x1, {0x0, r8}}, 0x5) 14:47:16 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb, 0x30, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) ptrace(0x10, r0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(0xffffffffffffffff, r1) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:47:16 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) 14:47:17 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400) fcntl$getown(r0, 0x9) 14:47:17 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:47:17 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:47:17 executing program 4: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = semget(0x3, 0x4, 0x40) semtimedop(r0, &(0x7f0000000000)=[{0x3, 0x5, 0x1000}, {0x2, 0x0, 0x800}, {0x1, 0x200, 0x1000}, {0x2, 0x100, 0x1000}, {0x2, 0x5, 0x800}, {0x3, 0xf44, 0x1800}, {0x4, 0x7f, 0x800}], 0x7, &(0x7f0000000040)) r1 = semget$private(0x0, 0x6, 0x0) semctl$GETZCNT(r1, 0x741ad5bdf2b7fe62, 0xf, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)) r2 = semget$private(0x0, 0x6, 0x0) semctl$GETZCNT(r2, 0x741ad5bdf2b7fe62, 0xf, 0x0) r3 = semget(0x2, 0x1, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) unshare(0x2000400) semop(r2, &(0x7f0000000080)=[{0x2, 0xfff7, 0x800}, {0x2, 0x8, 0x1000}, {0x3, 0xffff}, {0x4, 0x2, 0x1800}, {0x0, 0x4, 0x800}], 0x5) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) 14:47:17 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB="5e1b40436630c44c974740751760304730395400000000005db9247eb29600b66c3a77e76da7a74f3732c53e9eb3eef59b584a305b5c1afa0f1c7b29d5fede8150b6f7fe24906f37d6f2180b52df34422625b48ace3874209b8dd4d6c86750b4f57e"]) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r3}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r3, 0x3400000000000000, 0x20, 0x1}) 14:47:17 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:47:17 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x60, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:47:17 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb, 0x30, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:47:17 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff2100050001000000002500000000"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:47:17 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:47:17 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400) fcntl$getown(r0, 0x9) 14:47:17 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x121, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:47:17 executing program 0: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x12) 14:47:32 executing program 4: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x12) 14:47:32 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb, 0x30, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:47:32 executing program 7: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x14) 14:47:32 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff2100050001000000002500000000"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:47:32 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x0, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:47:32 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x0) fcntl$getown(r0, 0x9) 14:47:32 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x1a5, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:47:32 executing program 0: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x14) 14:47:32 executing program 0: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x14) 14:47:32 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x0) fcntl$getown(r0, 0x9) 14:47:32 executing program 7: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x14) 14:47:32 executing program 4: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x12) 14:47:46 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb, 0x30, 0xffffffffffffffff, 0x0) r0 = fork() ptrace$setopts(0x4206, r0, 0x10001, 0x3d) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:47:46 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) 14:47:46 executing program 7: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x12) 14:47:47 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x0, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:47:47 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x0) fcntl$getown(r0, 0x9) 14:47:47 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff2100050001000000002500000000"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:47:47 executing program 0: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x11) 14:47:47 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x1dd, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:47:47 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(0xffffffffffffffff, 0x9) 14:47:47 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x1de, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:47:47 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x0, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:47:47 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) 14:47:47 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) 14:47:47 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB="5e1b40436630c44c974740751760304730395400000000005db9247eb29600b66c3a77e76da7a74f3732c53e9eb3eef59b584a305b5c1afa0f1c7b29d5fede8150b6f7fe24906f37d6f2180b52df34422625b48ace3874209b8dd4d6c86750b4f57e"]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:47:47 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:47:47 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(0xffffffffffffffff, 0x9) 14:47:47 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb, 0x30, 0xffffffffffffffff, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:47:47 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x1e0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:47:47 executing program 4: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0xb) 14:47:47 executing program 0: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x3) 14:47:47 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(0xffffffffffffffff, 0x9) 14:47:47 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB="5e1b40436630c44c974740751760304730395400000000005db9247eb29600b66c3a77e76da7a74f3732c53e9eb3eef59b584a305b5c1afa0f1c7b29d5fede8150b6f7fe24906f37d6f2180b52df34422625b48ace3874209b8dd4d6c86750b4f57e"]) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r3}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r3, 0x3400000000000000, 0x20, 0x1}) 14:48:02 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, 0x0}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:48:02 executing program 7: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x2) 14:48:02 executing program 0: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x2) 14:48:02 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb, 0x30, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r0, r1) ptrace$setregset(0x4205, 0x0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:48:02 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:48:02 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x1ee, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:48:02 executing program 4: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x3) 14:48:02 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB="5e1b40436630c44c974740751760304730395400000000005db9247eb29600b66c3a77e76da7a74f3732c53e9eb3eef59b584a305b5c1afa0f1c7b29d5fede8150b6f7fe24906f37d6f2180b52df34422625b48ace3874209b8dd4d6c86750b4f57e"]) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r3}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r3, 0x3400000000000000, 0x20, 0x1}) 14:48:02 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB="5e1b40436630c44c974740751760304730395400000000005db9247eb29600b66c3a77e76da7a74f3732c53e9eb3eef59b584a305b5c1afa0f1c7b29d5fede8150b6f7fe24906f37d6f2180b52df34422625b48ace3874209b8dd4d6c86750b4f57e"]) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r3}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r3, 0x3400000000000000, 0x20, 0x1}) 14:48:02 executing program 7: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0xff7f000000000000, 0x10) 14:48:02 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x500, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:48:17 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:48:17 executing program 5: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x40000000000000, 0x10) 14:48:17 executing program 7: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x3f00000000000000, 0x10) 14:48:17 executing program 0: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x2) 14:48:17 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, 0x0}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:48:17 executing program 4: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x40000000000000, 0x10) 14:48:17 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb, 0x30, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r0, r1) ptrace$setregset(0x4205, 0x0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:48:17 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x600, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:48:17 executing program 5: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x3f000000, 0x10) 14:48:17 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, 0x0}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:48:17 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) 14:48:17 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0xc00, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:48:17 executing program 7: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x400000, 0x10) 14:48:17 executing program 4: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0xff7f, 0x10) 14:48:17 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb, 0x30, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r0, r1) ptrace$setregset(0x4205, 0x0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:48:17 executing program 0: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x2) 14:48:17 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x1200, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:48:17 executing program 5: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x4000, 0x10) 14:48:17 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) 14:48:33 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:48:33 executing program 4: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb, 0x30, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r0, r1) ptrace$setregset(0x4205, 0x0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:48:33 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:48:33 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB="5e1b40436630c44c974740751760304730395400000000005db9247eb29600b66c3a77e76da7a74f3732c53e9eb3eef59b584a305b5c1afa0f1c7b29d5fede8150b6f7fe24906f37d6f2180b52df34422625b48ace3874209b8dd4d6c86750b4f57e"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r3}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r3, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000040)) 14:48:33 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:48:33 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) 14:48:33 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x9) (fail_nth: 1) [ 1581.531025] FAULT_INJECTION: forcing a failure. [ 1581.531025] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1581.532567] CPU: 1 PID: 8758 Comm: syz-executor.5 Not tainted 5.10.229 #1 [ 1581.533473] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1581.534547] Call Trace: [ 1581.534904] dump_stack+0x107/0x167 [ 1581.535387] should_fail.cold+0x5/0xa [ 1581.535898] _copy_to_user+0x2e/0x180 [ 1581.536406] simple_read_from_buffer+0xcc/0x160 [ 1581.537044] proc_fail_nth_read+0x198/0x230 [ 1581.537611] ? proc_sessionid_read+0x230/0x230 [ 1581.538172] ? security_file_permission+0xb1/0xe0 [ 1581.538797] ? proc_sessionid_read+0x230/0x230 [ 1581.539387] vfs_read+0x228/0x620 [ 1581.539849] ksys_read+0x12d/0x260 [ 1581.540314] ? vfs_write+0xb10/0xb10 [ 1581.544823] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1581.545487] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1581.546159] do_syscall_64+0x33/0x40 [ 1581.546649] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1581.547310] RIP: 0033:0x7f419bd9469c 14:48:33 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x1800, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) [ 1581.547804] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1581.550165] RSP: 002b:00007f4199357170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1581.551152] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f419bd9469c [ 1581.560784] RDX: 000000000000000f RSI: 00007f41993571e0 RDI: 0000000000000004 [ 1581.561710] RBP: 00007f41993571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1581.562595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1581.563502] R13: 00007ffeedb1f4ff R14: 00007f4199357300 R15: 0000000000022000 14:48:33 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x1e00, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:48:33 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:48:33 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) (fail_nth: 1) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:48:33 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) (fail_nth: 1) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:48:33 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) 14:48:33 executing program 0: unshare(0x28020600) semget$private(0x0, 0x0, 0x100) r0 = fork() r1 = open_tree(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x9100) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x204, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x5, 0xc0, 0x81, 0x80, 0x0, 0x4, 0x10400, 0x6, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f0000000280), 0xa}, 0x4000, 0x0, 0x7, 0x5, 0x7fffffff, 0x0, 0x7, 0x0, 0x6, 0x0, 0xd7c}, r0, 0xc, r1, 0x1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$FITRIM(r3, 0xc020662a, &(0x7f0000000080)={0x0, 0xfff7fffffffffff7}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x9, 0x3, 0x12, 0xfc, 0x0, 0x3, 0x40000, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000, 0x1, @perf_bp, 0x80, 0x2, 0x1, 0x3, 0x1f, 0xf984, 0x100, 0x0, 0xfb8, 0x0, 0x4}, r2, 0x3, r3, 0xa) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fffffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) unshare(0x48020200) [ 1581.757251] FAULT_INJECTION: forcing a failure. [ 1581.757251] name failslab, interval 1, probability 0, space 0, times 0 [ 1581.758492] FAULT_INJECTION: forcing a failure. [ 1581.758492] name failslab, interval 1, probability 0, space 0, times 0 [ 1581.760760] CPU: 1 PID: 8785 Comm: syz-executor.7 Not tainted 5.10.229 #1 [ 1581.764819] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1581.765853] Call Trace: [ 1581.766198] dump_stack+0x107/0x167 [ 1581.766646] should_fail.cold+0x5/0xa [ 1581.767133] ? kvmalloc_node+0x119/0x170 [ 1581.767636] should_failslab+0x5/0x20 [ 1581.768117] __kmalloc_node+0x76/0x420 [ 1581.768605] kvmalloc_node+0x119/0x170 [ 1581.769117] seq_read_iter+0x9d6/0x12b0 [ 1581.769623] seq_read+0x3dd/0x5b0 [ 1581.770067] ? seq_read_iter+0x12b0/0x12b0 [ 1581.770602] ? find_held_lock+0x2c/0x110 [ 1581.771128] ? _cond_resched+0x12/0x80 [ 1581.771614] ? fsnotify_perm.part.0+0x22d/0x620 [ 1581.772201] ? seq_read_iter+0x12b0/0x12b0 [ 1581.772732] proc_reg_read+0x22a/0x300 [ 1581.773243] ? proc_reg_write+0x300/0x300 [ 1581.773759] vfs_read+0x228/0x620 [ 1581.774213] __x64_sys_pread64+0x201/0x260 [ 1581.774760] ? ksys_pread64+0x1b0/0x1b0 [ 1581.775272] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1581.775914] do_syscall_64+0x33/0x40 [ 1581.776383] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1581.777040] RIP: 0033:0x7f590ddd3b19 [ 1581.777506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1581.779772] RSP: 002b:00007f590b349188 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1581.780725] RAX: ffffffffffffffda RBX: 00007f590dee6f60 RCX: 00007f590ddd3b19 [ 1581.781617] RDX: 0000000000000053 RSI: 0000000020000240 RDI: 0000000000000004 [ 1581.782513] RBP: 00007f590b3491d0 R08: 0000000000000000 R09: 0000000000000000 [ 1581.783410] R10: 0000000200000048 R11: 0000000000000246 R12: 0000000000000001 [ 1581.784296] R13: 00007ffcf8587f7f R14: 00007f590b349300 R15: 0000000000022000 [ 1581.785214] CPU: 0 PID: 8783 Comm: syz-executor.4 Not tainted 5.10.229 #1 [ 1581.786094] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1581.787151] Call Trace: [ 1581.787493] dump_stack+0x107/0x167 [ 1581.787976] should_fail.cold+0x5/0xa [ 1581.788468] ? kvmalloc_node+0x119/0x170 [ 1581.789023] should_failslab+0x5/0x20 [ 1581.789519] __kmalloc_node+0x76/0x420 [ 1581.790026] kvmalloc_node+0x119/0x170 [ 1581.790540] seq_read_iter+0x9d6/0x12b0 [ 1581.791069] seq_read+0x3dd/0x5b0 [ 1581.791532] ? seq_read_iter+0x12b0/0x12b0 [ 1581.792076] ? find_held_lock+0x2c/0x110 [ 1581.792605] ? _cond_resched+0x12/0x80 [ 1581.793124] ? fsnotify_perm.part.0+0x22d/0x620 [ 1581.793736] ? seq_read_iter+0x12b0/0x12b0 [ 1581.794284] proc_reg_read+0x22a/0x300 [ 1581.794798] ? proc_reg_write+0x300/0x300 [ 1581.795341] vfs_read+0x228/0x620 [ 1581.795808] __x64_sys_pread64+0x201/0x260 [ 1581.796351] ? ksys_pread64+0x1b0/0x1b0 [ 1581.796889] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1581.797567] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1581.798230] do_syscall_64+0x33/0x40 [ 1581.798716] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1581.799383] RIP: 0033:0x7fe433979b19 [ 1581.799867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1581.802239] RSP: 002b:00007fe430eef188 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1581.803221] RAX: ffffffffffffffda RBX: 00007fe433a8cf60 RCX: 00007fe433979b19 [ 1581.804156] RDX: 0000000000000053 RSI: 0000000020000240 RDI: 0000000000000005 [ 1581.805111] RBP: 00007fe430eef1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1581.806023] R10: 0000000200000048 R11: 0000000000000246 R12: 0000000000000001 [ 1581.806930] R13: 00007fffc010221f R14: 00007fe430eef300 R15: 0000000000022000 14:48:48 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x9) 14:48:48 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:48:48 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000180), 0x0, &(0x7f0000000440)=ANY=[]) socket$nl_generic(0x10, 0x3, 0x10) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x430b, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xb}, 0x0, 0x0, 0x1, 0x0, 0x8ee, 0x0, 0x0, 0x0, 0x64b}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(r1, 0x4, 0xc00) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) dup2(0xffffffffffffffff, r1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) open_by_handle_at(r0, &(0x7f0000000080)=ANY=[], 0x8e880) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x1, r4, 0x1, 0x8, 0x6, @random="190002400a00"}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'bridge0\x00'}) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0x1}], 0x1}, 0x10044005) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 14:48:48 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) (fail_nth: 2) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:48:48 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x1faa, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:48:48 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) (fail_nth: 2) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:48:48 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) 14:48:48 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) [ 1597.418531] FAULT_INJECTION: forcing a failure. [ 1597.418531] name failslab, interval 1, probability 0, space 0, times 0 [ 1597.420183] CPU: 0 PID: 8812 Comm: syz-executor.4 Not tainted 5.10.229 #1 [ 1597.421057] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1597.421391] FAULT_INJECTION: forcing a failure. [ 1597.421391] name failslab, interval 1, probability 0, space 0, times 0 [ 1597.422085] Call Trace: [ 1597.422106] dump_stack+0x107/0x167 [ 1597.422121] should_fail.cold+0x5/0xa [ 1597.422139] ? create_object.isra.0+0x3a/0xa20 [ 1597.422156] should_failslab+0x5/0x20 [ 1597.422173] kmem_cache_alloc+0x5b/0x310 [ 1597.426253] create_object.isra.0+0x3a/0xa20 [ 1597.426790] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1597.427429] __kmalloc_node+0x1ae/0x420 [ 1597.427932] kvmalloc_node+0x119/0x170 [ 1597.428423] seq_read_iter+0x9d6/0x12b0 [ 1597.428928] seq_read+0x3dd/0x5b0 [ 1597.429382] ? seq_read_iter+0x12b0/0x12b0 [ 1597.429909] ? find_held_lock+0x2c/0x110 [ 1597.430426] ? _cond_resched+0x12/0x80 [ 1597.430917] ? fsnotify_perm.part.0+0x22d/0x620 [ 1597.431500] ? seq_read_iter+0x12b0/0x12b0 [ 1597.432032] proc_reg_read+0x22a/0x300 [ 1597.432517] ? proc_reg_write+0x300/0x300 [ 1597.433035] vfs_read+0x228/0x620 [ 1597.433489] __x64_sys_pread64+0x201/0x260 [ 1597.434021] ? ksys_pread64+0x1b0/0x1b0 [ 1597.434519] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1597.435175] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1597.435809] do_syscall_64+0x33/0x40 [ 1597.436281] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1597.436914] RIP: 0033:0x7fe433979b19 [ 1597.437408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1597.439672] RSP: 002b:00007fe430eef188 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1597.440644] RAX: ffffffffffffffda RBX: 00007fe433a8cf60 RCX: 00007fe433979b19 [ 1597.441580] RDX: 0000000000000053 RSI: 0000000020000240 RDI: 0000000000000005 [ 1597.442470] RBP: 00007fe430eef1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1597.443354] R10: 0000000200000048 R11: 0000000000000246 R12: 0000000000000001 [ 1597.444239] R13: 00007fffc010221f R14: 00007fe430eef300 R15: 0000000000022000 [ 1597.445158] CPU: 1 PID: 8811 Comm: syz-executor.7 Not tainted 5.10.229 #1 [ 1597.446051] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1597.447110] Call Trace: [ 1597.447457] dump_stack+0x107/0x167 [ 1597.447927] should_fail.cold+0x5/0xa [ 1597.448426] ? create_object.isra.0+0x3a/0xa20 [ 1597.449016] should_failslab+0x5/0x20 [ 1597.449525] kmem_cache_alloc+0x5b/0x310 [ 1597.450053] create_object.isra.0+0x3a/0xa20 [ 1597.450622] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1597.451282] __kmalloc_node+0x1ae/0x420 [ 1597.451806] kvmalloc_node+0x119/0x170 [ 1597.452319] seq_read_iter+0x9d6/0x12b0 [ 1597.452850] seq_read+0x3dd/0x5b0 [ 1597.453317] ? seq_read_iter+0x12b0/0x12b0 [ 1597.453867] ? find_held_lock+0x2c/0x110 [ 1597.454400] ? _cond_resched+0x12/0x80 [ 1597.454913] ? fsnotify_perm.part.0+0x22d/0x620 [ 1597.455527] ? seq_read_iter+0x12b0/0x12b0 [ 1597.456077] proc_reg_read+0x22a/0x300 [ 1597.456599] ? proc_reg_write+0x300/0x300 [ 1597.457140] vfs_read+0x228/0x620 [ 1597.457615] __x64_sys_pread64+0x201/0x260 [ 1597.458182] ? ksys_pread64+0x1b0/0x1b0 [ 1597.458709] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1597.459409] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1597.460078] do_syscall_64+0x33/0x40 [ 1597.460563] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1597.461243] RIP: 0033:0x7f590ddd3b19 [ 1597.461730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1597.464081] RSP: 002b:00007f590b349188 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1597.465060] RAX: ffffffffffffffda RBX: 00007f590dee6f60 RCX: 00007f590ddd3b19 [ 1597.465993] RDX: 0000000000000053 RSI: 0000000020000240 RDI: 0000000000000004 [ 1597.466910] RBP: 00007f590b3491d0 R08: 0000000000000000 R09: 0000000000000000 [ 1597.467854] R10: 0000000200000048 R11: 0000000000000246 R12: 0000000000000001 [ 1597.468775] R13: 00007ffcf8587f7f R14: 00007f590b349300 R15: 0000000000022000 [ 1597.477873] FAT-fs (loop0): bogus number of reserved sectors [ 1597.478652] FAT-fs (loop0): Can't find a valid FAT filesystem 14:48:49 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x2) [ 1597.548332] FAT-fs (loop0): bogus number of reserved sectors [ 1597.549186] FAT-fs (loop0): Can't find a valid FAT filesystem 14:48:49 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) (fail_nth: 3) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:48:49 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) (fail_nth: 3) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:48:49 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x2101, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:48:49 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:48:49 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) [ 1597.659034] FAULT_INJECTION: forcing a failure. [ 1597.659034] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1597.662567] CPU: 1 PID: 8839 Comm: syz-executor.7 Not tainted 5.10.229 #1 [ 1597.662737] FAULT_INJECTION: forcing a failure. [ 1597.662737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1597.664243] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1597.664249] Call Trace: [ 1597.664269] dump_stack+0x107/0x167 [ 1597.664285] should_fail.cold+0x5/0xa [ 1597.664307] _copy_to_user+0x2e/0x180 [ 1597.671533] simple_read_from_buffer+0xcc/0x160 [ 1597.672698] proc_fail_nth_read+0x198/0x230 [ 1597.673886] ? proc_sessionid_read+0x230/0x230 [ 1597.675034] ? security_file_permission+0xb1/0xe0 [ 1597.676252] ? proc_sessionid_read+0x230/0x230 [ 1597.677438] vfs_read+0x228/0x620 [ 1597.678308] ksys_read+0x12d/0x260 [ 1597.679196] ? vfs_write+0xb10/0xb10 [ 1597.680125] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1597.681474] do_syscall_64+0x33/0x40 [ 1597.682404] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1597.683677] RIP: 0033:0x7f590dd8669c [ 1597.684609] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1597.687198] RSP: 002b:00007f590b349170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1597.688141] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f590dd8669c [ 1597.689022] RDX: 000000000000000f RSI: 00007f590b3491e0 RDI: 0000000000000005 [ 1597.690913] RBP: 00007f590b3491d0 R08: 0000000000000000 R09: 0000000000000000 [ 1597.692699] R10: 0000000200000048 R11: 0000000000000246 R12: 0000000000000001 [ 1597.694709] R13: 00007ffcf8587f7f R14: 00007f590b349300 R15: 0000000000022000 [ 1597.696524] CPU: 0 PID: 8836 Comm: syz-executor.4 Not tainted 5.10.229 #1 [ 1597.697546] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1597.698807] Call Trace: [ 1597.699211] dump_stack+0x107/0x167 [ 1597.699778] should_fail.cold+0x5/0xa [ 1597.700378] _copy_to_user+0x2e/0x180 [ 1597.700957] simple_read_from_buffer+0xcc/0x160 [ 1597.701635] proc_fail_nth_read+0x198/0x230 [ 1597.702309] ? proc_sessionid_read+0x230/0x230 [ 1597.703018] ? security_file_permission+0xb1/0xe0 [ 1597.703764] ? proc_sessionid_read+0x230/0x230 [ 1597.704466] vfs_read+0x228/0x620 [ 1597.705004] ksys_read+0x12d/0x260 [ 1597.705539] ? vfs_write+0xb10/0xb10 [ 1597.706121] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1597.706929] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1597.707723] do_syscall_64+0x33/0x40 [ 1597.708297] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1597.709078] RIP: 0033:0x7fe43392c69c [ 1597.709580] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1597.711915] RSP: 002b:00007fe430eef170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1597.712875] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe43392c69c [ 1597.713901] RDX: 000000000000000f RSI: 00007fe430eef1e0 RDI: 0000000000000006 [ 1597.714931] RBP: 00007fe430eef1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1597.715959] R10: 0000000200000048 R11: 0000000000000246 R12: 0000000000000001 [ 1597.716991] R13: 00007fffc010221f R14: 00007fe430eef300 R15: 0000000000022000 14:48:49 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:48:49 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x2400, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:49:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x3) 14:49:04 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:49:04 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x2a00, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:49:04 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB]}, @devid}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:49:04 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:49:04 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) 14:49:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x4) 14:49:04 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:49:04 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x11, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@sr0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='ecryptfs\x00', 0x0, 0x0) r0 = syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="4ebf5ace0297e7440857d89e15ac575a24f8ccb06afa1ff87a52e0fe9a2e384696cf35560deddec0f1312d4212148dc78864abe8e561a95e79ad21dac046bbe2c2ace7dcdd43e80fa6588f29bd7a1e0031d133f9f98cfc4d71bf5a7ec934d7d454d65358e3e19486e8a35f8ad71657d32baebd4d6269d30bc8e0d98016a6ffa4da95bfd2ac72698ff971d200e20708bd2c694eded0a32ef4a8afc2c1173bfcf853d26369f7db83d9a6d278d2c2e12351a6702ff2623e357a6b2140acbfe828a9df098847cf4b0530849c8afd04488381c4c5a06c8288d6752efc13258f62e4ba7af56bca3c2f524096ee8872d3a0634f518d35b7dadf", 0xf6, 0x94}], 0x104800, &(0x7f00000002c0)={[{'#\xa0'}], [{@smackfshat={'smackfshat', 0x3d, '@^'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@appraise}]}) openat(r0, &(0x7f0000000300)='./file0\x00', 0x400, 0x50) link(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0/../file0\x00') 14:49:20 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x5) 14:49:20 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:49:20 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB]}, @devid}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:49:20 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x3000, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:49:20 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x20000293, 0x200000048) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:49:20 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r4}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) 14:49:20 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x20000293, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:49:20 executing program 0: r0 = epoll_create(0x1f) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup3(r1, r0, 0x0) write$P9_RVERSION(r2, &(0x7f00000000c0)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.L'}, 0x15) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80900) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) r5 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r5, 0x0) r6 = dup2(r5, r4) fallocate(r4, 0x3, 0x0, 0x30000000000) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = inotify_init() ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r7, 0xc0c89425, &(0x7f0000000140)={"53abc6abf1d9a2d838f911228cb32614", 0x0, 0x0, {0x0, 0x400}, {0xffffffff, 0x8}, 0x0, [0x4, 0x9, 0x1, 0x8000, 0xf3a, 0x0, 0x0, 0x7fffffff, 0x3, 0x68, 0xf42, 0x8, 0x100, 0x1a1d0a1d, 0x101, 0x7]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001580)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r8, 0x80489439, &(0x7f0000001980)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) fcntl$dupfd(r11, 0x0, r7) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r7, 0x5000943f, &(0x7f0000000580)={{r8}, r9, 0x16, @unused=[0x8000, 0x0, 0x6, 0x8e], @devid=r10}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000100)={r10, 0x8, 0x1, [0xfff, 0x8, 0x0, 0x9, 0x10000], [0x8, 0x100000001, 0x9, 0x4, 0x0, 0x6, 0x1, 0xfff, 0xffffffffffff0000, 0x7, 0xe58, 0xff, 0x4, 0x8, 0x100000000, 0x100000001, 0x4e2, 0x7fffffff, 0x2711, 0x6, 0x1, 0x1, 0x4b, 0x0, 0x100, 0x9, 0x6, 0x8, 0x1, 0x400, 0x100, 0x3ff, 0xab6e, 0x4, 0xcc, 0x7, 0x3570, 0x2, 0x6, 0x2, 0x9, 0x8030, 0x8e, 0x80000001, 0x7, 0x76, 0xa45, 0x3, 0x1dc00000000000, 0x3, 0x3f, 0x1, 0x9, 0x788b, 0x3, 0x5, 0x7, 0x2, 0x5, 0xfffffffffffffffa, 0x8, 0x7fff, 0x6, 0x2, 0x7, 0x0, 0x200, 0x80000000, 0xad4, 0x3, 0x2, 0x3, 0x1, 0x1079, 0x0, 0x100000000, 0x100000001, 0x1, 0x3ff, 0x8d9, 0xa4, 0x6, 0x3ff, 0xcbd, 0xfffffffffffffff8, 0x1, 0x6, 0x4, 0x1, 0x81, 0x400, 0x10001, 0x64, 0x0, 0x80000000, 0x8, 0x6, 0xa8, 0x200, 0x5, 0x7, 0x4, 0x101, 0x8000, 0x3, 0x65361d84, 0x1, 0x100, 0x7, 0x1, 0x92, 0x80, 0xffff, 0x5f9, 0x7fffffff, 0xfe1, 0xc5, 0xa09, 0xaed7, 0x8, 0x6cd]}) 14:49:20 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x6) 14:49:20 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x59) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:49:20 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x3600, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:49:20 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB]}, @devid}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:49:20 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r4}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) 14:49:20 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x59) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:49:20 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x7) 14:49:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f00000000c0)=0xfffffffa, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) 14:49:20 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:49:20 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0xb5) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:49:20 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:49:20 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r4}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) 14:49:20 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x3c00, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:49:20 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x8) 14:49:35 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0xa) 14:49:35 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x59) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:49:35 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:49:35 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0xb5) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:49:35 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x111) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:49:35 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x3f00, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:49:35 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:49:35 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) (fail_nth: 1) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) [ 1643.918713] FAULT_INJECTION: forcing a failure. [ 1643.918713] name failslab, interval 1, probability 0, space 0, times 0 [ 1643.922325] CPU: 0 PID: 8980 Comm: syz-executor.0 Not tainted 5.10.229 #1 [ 1643.924467] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1643.925534] Call Trace: [ 1643.925887] dump_stack+0x107/0x167 [ 1643.926359] should_fail.cold+0x5/0xa [ 1643.930885] ? kvmalloc_node+0x119/0x170 [ 1643.931426] should_failslab+0x5/0x20 [ 1643.931924] __kmalloc_node+0x76/0x420 [ 1643.932450] kvmalloc_node+0x119/0x170 [ 1643.932971] seq_read_iter+0x9d6/0x12b0 [ 1643.933513] seq_read+0x3dd/0x5b0 [ 1643.933974] ? seq_read_iter+0x12b0/0x12b0 [ 1643.934522] ? find_held_lock+0x2c/0x110 [ 1643.935077] ? _cond_resched+0x12/0x80 [ 1643.935599] ? fsnotify_perm.part.0+0x22d/0x620 [ 1643.936216] ? seq_read_iter+0x12b0/0x12b0 [ 1643.936775] proc_reg_read+0x22a/0x300 [ 1643.937292] ? proc_reg_write+0x300/0x300 [ 1643.937838] vfs_read+0x228/0x620 [ 1643.938308] __x64_sys_pread64+0x201/0x260 [ 1643.938868] ? ksys_pread64+0x1b0/0x1b0 [ 1643.939397] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1643.940081] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1643.940755] do_syscall_64+0x33/0x40 [ 1643.941243] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1643.941914] RIP: 0033:0x7fb8f6e5cb19 [ 1643.942406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1643.944791] RSP: 002b:00007fb8f43d2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1643.945776] RAX: ffffffffffffffda RBX: 00007fb8f6f6ff60 RCX: 00007fb8f6e5cb19 [ 1643.946707] RDX: 0000000000000053 RSI: 0000000020000240 RDI: 0000000000000005 [ 1643.947647] RBP: 00007fb8f43d21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1643.948546] R10: 0000000200000048 R11: 0000000000000246 R12: 0000000000000001 [ 1643.949458] R13: 00007ffcfdf4d15f R14: 00007fb8f43d2300 R15: 0000000000022000 [ 1643.977741] cgroup: fork rejected by pids controller in /syz2 14:49:35 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0xb) 14:49:35 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:49:35 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x16d) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:49:35 executing program 3: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2f3}}, './file0\x00'}) syz_io_uring_setup(0x2ec9, &(0x7f0000000000)={0x0, 0x5891, 0xc, 0x1, 0x2eb, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000001500), &(0x7f0000000080)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x12, 0x0, 0x0) 14:49:35 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x4000, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:49:35 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x111) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:49:35 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x7fff, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$cgroup(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000280)='mnt/encrypted_dir\x00', 0x482200, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x10) futimesat(r3, 0x0, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000340), 0x400200, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {r0}}, './file1\x00'}) openat(0xffffffffffffffff, &(0x7f0000000300)='mnt/encrypted_dir\x00', 0x2100, 0x3) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000440)=ANY=[@ANYBLOB="9bfc000000010000001800"/25, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00mnt/encrypted_dir\x00']) unlinkat(r2, &(0x7f0000000400)='mnt/encrypted_dir/file0\x00', 0x0) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x1, 0x5b) name_to_handle_at(r5, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="280000004e00000001000000000000000500000000000000040000001100000000000000090000000000000001000000"], &(0x7f00000003c0), 0x400) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 14:49:35 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0xf) 14:49:35 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:49:35 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) (fail_nth: 2) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:49:35 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x4200, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:49:35 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x1c9) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) [ 1644.244632] FAULT_INJECTION: forcing a failure. [ 1644.244632] name failslab, interval 1, probability 0, space 0, times 0 [ 1644.246617] CPU: 0 PID: 9024 Comm: syz-executor.0 Not tainted 5.10.229 #1 [ 1644.247475] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1644.248475] Call Trace: [ 1644.248800] dump_stack+0x107/0x167 [ 1644.249242] should_fail.cold+0x5/0xa [ 1644.249711] ? create_object.isra.0+0x3a/0xa20 [ 1644.250266] should_failslab+0x5/0x20 [ 1644.250728] kmem_cache_alloc+0x5b/0x310 [ 1644.259248] create_object.isra.0+0x3a/0xa20 [ 1644.259778] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1644.260396] __kmalloc_node+0x1ae/0x420 [ 1644.260887] kvmalloc_node+0x119/0x170 [ 1644.261363] seq_read_iter+0x9d6/0x12b0 [ 1644.261857] seq_read+0x3dd/0x5b0 [ 1644.262277] ? seq_read_iter+0x12b0/0x12b0 [ 1644.262800] ? find_held_lock+0x2c/0x110 [ 1644.263309] ? _cond_resched+0x12/0x80 [ 1644.263786] ? fsnotify_perm.part.0+0x22d/0x620 [ 1644.264355] ? seq_read_iter+0x12b0/0x12b0 [ 1644.264872] proc_reg_read+0x22a/0x300 [ 1644.265344] ? proc_reg_write+0x300/0x300 [ 1644.265848] vfs_read+0x228/0x620 [ 1644.266276] __x64_sys_pread64+0x201/0x260 [ 1644.266802] ? ksys_pread64+0x1b0/0x1b0 [ 1644.267297] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1644.267931] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1644.268554] do_syscall_64+0x33/0x40 [ 1644.269006] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1644.269626] RIP: 0033:0x7fb8f6e5cb19 [ 1644.270083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1644.272312] RSP: 002b:00007fb8f43d2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1644.273234] RAX: ffffffffffffffda RBX: 00007fb8f6f6ff60 RCX: 00007fb8f6e5cb19 [ 1644.274095] RDX: 0000000000000053 RSI: 0000000020000240 RDI: 0000000000000005 [ 1644.274981] RBP: 00007fb8f43d21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1644.275841] R10: 0000000200000048 R11: 0000000000000246 R12: 0000000000000001 [ 1644.276703] R13: 00007ffcfdf4d15f R14: 00007fb8f43d2300 R15: 0000000000022000 14:49:50 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x7fff, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$cgroup(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000280)='mnt/encrypted_dir\x00', 0x482200, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x10) futimesat(r3, 0x0, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000340), 0x400200, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {r0}}, './file1\x00'}) openat(0xffffffffffffffff, &(0x7f0000000300)='mnt/encrypted_dir\x00', 0x2100, 0x3) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000440)=ANY=[@ANYBLOB="9bfc000000010000001800"/25, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00mnt/encrypted_dir\x00']) unlinkat(r2, &(0x7f0000000400)='mnt/encrypted_dir/file0\x00', 0x0) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x1, 0x5b) name_to_handle_at(r5, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="280000004e00000001000000000000000500000000000000040000001100000000000000090000000000000001000000"], &(0x7f00000003c0), 0x400) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 14:49:50 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:49:50 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={0x0, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:49:50 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x16d) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:49:50 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) (fail_nth: 3) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:49:50 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x10) 14:49:50 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x225) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:49:50 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x6000, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) [ 1659.216011] FAULT_INJECTION: forcing a failure. [ 1659.216011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1659.218596] CPU: 0 PID: 9052 Comm: syz-executor.0 Not tainted 5.10.229 #1 [ 1659.219457] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1659.220468] Call Trace: [ 1659.220797] dump_stack+0x107/0x167 [ 1659.221243] should_fail.cold+0x5/0xa [ 1659.221715] _copy_to_user+0x2e/0x180 [ 1659.222185] simple_read_from_buffer+0xcc/0x160 [ 1659.222760] proc_fail_nth_read+0x198/0x230 [ 1659.223300] ? proc_sessionid_read+0x230/0x230 [ 1659.224670] ? security_file_permission+0xb1/0xe0 [ 1659.225266] ? proc_sessionid_read+0x230/0x230 [ 1659.225826] vfs_read+0x228/0x620 [ 1659.226254] ksys_read+0x12d/0x260 [ 1659.226689] ? vfs_write+0xb10/0xb10 [ 1659.227145] ? __x64_sys_read+0xd/0xb0 [ 1659.227650] ? __sanitizer_cov_trace_pc+0x52/0x60 [ 1659.228246] do_syscall_64+0x33/0x40 [ 1659.228699] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1659.229322] RIP: 0033:0x7fb8f6e0f69c [ 1659.229782] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1659.233107] RSP: 002b:00007fb8f43d2170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1659.235278] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb8f6e0f69c [ 1659.237377] RDX: 000000000000000f RSI: 00007fb8f43d21e0 RDI: 0000000000000006 [ 1659.239465] RBP: 00007fb8f43d21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1659.241519] R10: 0000000200000048 R11: 0000000000000246 R12: 0000000000000001 [ 1659.243647] R13: 00007ffcfdf4d15f R14: 00007fb8f43d2300 R15: 0000000000022000 14:50:06 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x11) 14:50:06 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={0x0, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:50:06 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x7fff, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$cgroup(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000280)='mnt/encrypted_dir\x00', 0x482200, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x10) futimesat(r3, 0x0, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000340), 0x400200, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {r0}}, './file1\x00'}) openat(0xffffffffffffffff, &(0x7f0000000300)='mnt/encrypted_dir\x00', 0x2100, 0x3) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000440)=ANY=[@ANYBLOB="9bfc000000010000001800"/25, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00mnt/encrypted_dir\x00']) unlinkat(r2, &(0x7f0000000400)='mnt/encrypted_dir/file0\x00', 0x0) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x1, 0x5b) name_to_handle_at(r5, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="280000004e00000001000000000000000500000000000000040000001100000000000000090000000000000001000000"], &(0x7f00000003c0), 0x400) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 14:50:06 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:50:06 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:50:06 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x1c9) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:50:06 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0xa501, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:50:06 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x281) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:50:06 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x24) 14:50:06 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x2dd) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:50:06 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x225) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:50:06 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x25) 14:50:06 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0xaa1f, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:50:06 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x20000293, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:50:06 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x26) 14:50:06 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={0x0, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:50:06 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:50:21 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:50:21 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x402) 14:50:21 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x281) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:50:21 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x339) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:50:21 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x7fff, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$cgroup(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000280)='mnt/encrypted_dir\x00', 0x482200, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x10) futimesat(r3, 0x0, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000340), 0x400200, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {r0}}, './file1\x00'}) openat(0xffffffffffffffff, &(0x7f0000000300)='mnt/encrypted_dir\x00', 0x2100, 0x3) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000440)=ANY=[@ANYBLOB="9bfc000000010000001800"/25, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00mnt/encrypted_dir\x00']) unlinkat(r2, &(0x7f0000000400)='mnt/encrypted_dir/file0\x00', 0x0) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x1, 0x5b) name_to_handle_at(r5, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="280000004e00000001000000000000000500000000000000040000001100000000000000090000000000000001000000"], &(0x7f00000003c0), 0x400) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 14:50:21 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x0, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:50:21 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0xdd01, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:50:21 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x59) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:50:21 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x406) 14:50:21 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0xde01, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:50:21 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x407) 14:50:21 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x0, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:50:21 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0xb5) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:50:21 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x2dd) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:50:21 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000009) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:50:21 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x0, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:50:22 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) unshare(0x10800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:50:22 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0xe001, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:50:22 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x339) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:50:22 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x0, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:50:22 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x7fff, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$cgroup(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000280)='mnt/encrypted_dir\x00', 0x482200, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x10) futimesat(r3, 0x0, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000340), 0x400200, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {r0}}, './file1\x00'}) openat(0xffffffffffffffff, &(0x7f0000000300)='mnt/encrypted_dir\x00', 0x2100, 0x3) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000440)=ANY=[@ANYBLOB="9bfc000000010000001800"/25, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00mnt/encrypted_dir\x00']) unlinkat(r2, &(0x7f0000000400)='mnt/encrypted_dir/file0\x00', 0x0) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x1, 0x5b) name_to_handle_at(r5, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="280000004e00000001000000000000000500000000000000040000001100000000000000090000000000000001000000"], &(0x7f00000003c0), 0x400) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 14:50:22 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x408) 14:50:37 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000009) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:50:37 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) unshare(0x10800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:50:37 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0xee01, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:50:37 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r2, 0x4, 0x2400) fcntl$setstatus(r2, 0x4, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000340)=0xcf) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0xbc, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xa7, 0x6e}}}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "2f31946fab17b2ef4403a15063caecd5"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "0eafd9b0d28cfa6a1de8bce846f9b7c6"}, @NL80211_ATTR_PMK={0x14, 0xfe, "26ecd9e1cd03ee0ea54948f3a0ba552a"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "41ea61ca679a483f1900d4c9852478d2"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "80f2400a19ff2958284973be3b58229b"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "c514982370823d376b8aaf983695a0a1"}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40035}, 0x20000080) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000ac0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:50:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x409) 14:50:37 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x111) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:50:37 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000009) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:50:37 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x0, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) [ 1705.872268] audit: type=1400 audit(1731250237.428:13): avc: denied { read } for pid=9412 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 14:50:37 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x0, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:50:37 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x16d) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:50:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x40a) 14:50:37 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000009) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:50:37 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000040)=ANY=[@ANYBLOB="dcaa7200507df48473133fdb3a7ee9839fb800004ba4e0e9e47853f327a55282a93229be43c4ffb16cac06814b5b5f950703a7979d25fa9a4a45932d4fb2f39268e118ff630400000056a197a3c8308afc9294a5ae45a127250842f76b2de75cfbe86f8f0df2687453fc8a6ad6a82e7bea5dd2083fa82e34b948c87e4f92589de005887ef40fdb8c9c27703e8aa7c4173a0c281e5d623b39369cfada08d68c90e23fa1d0e70322bb54db75fa"]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) dup3(r1, r1, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:50:52 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0xfffffffc}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:50:52 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x1c9) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:50:52 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000008c0)}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r10 = dup2(r3, r0) io_uring_enter(r10, 0x21bf, 0x2c81, 0x1, &(0x7f00000000c0)={[0x17d]}, 0x8) bind$packet(r7, &(0x7f0000000280)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @random="5b54e8e5b22d"}, 0x14) connect$packet(r6, &(0x7f0000000080)={0x11, 0x6, r9, 0x1, 0xe0, 0x6, @remote}, 0x14) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 14:50:52 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:50:52 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) unshare(0x10800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:50:52 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x80000, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:50:52 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x40b) 14:50:52 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x145000, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}, 0xa000, 0x0, 0x0, 0x9}, 0x0, 0x0, r1, 0x8) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f00000006c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:50:52 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x40e) 14:50:52 executing program 7: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x4400, 0x0) sendmsg$nl_generic(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)={0x258, 0x3d, 0x800, 0x70bd25, 0x25dfdbfb, {0x4}, [@nested={0x18, 0x53, 0x0, 0x1, [@typed={0x8, 0x25, 0x0, 0x0, @pid}, @generic="bbbd784f91b434a7762c2f25"]}, @nested={0xc, 0x6e, 0x0, 0x1, [@typed={0x8, 0x30, 0x0, 0x0, @fd}]}, @typed={0xe, 0xc, 0x0, 0x0, @str='#/{#/X\\@!\x00'}, @nested={0x24, 0x2f, 0x0, 0x1, [@typed={0x1b, 0x8a, 0x0, 0x0, @binary="440ecd09eed47d82daf6b642ab2c9e33ad533ce9aa79f7"}, @typed={0x4, 0x48, 0x0, 0x0, @binary}]}, @nested={0x118, 0x1d, 0x0, 0x1, [@generic="2f9e893fb5a89dec02f1e51d02bf8059ebd4ad3aecf842905f06f8af6b8bc20f76cd857ab2975b7f32c162c256152a5351a9ccbfee2214e596490b6e9de3c20f2a8c9f00631b79926dd48eb9f530c2717caf46da3c431df459132012c2378f87de3f886fbfe250319deef90de88a08c5ed98aeab65013ab5", @typed={0x4, 0x1c}, @generic="1e07a626b69ef030b9b7275e6094b354cfe72273acf7d1706b860b5d69914513320189a9022024f7b1d1c042e1e0a6e82e5e8fda122173dfd4f41b3563cdc9697250e455d3e338cf7cb3ef85db4df11c3cfbc8947e369f0b16c2cc2761bac17fca1df6509e4123fb561d618606ee4e529ffe262eed621f415a666058bba1940c17e3223498cd53eaddd1cdc395275a3ce43b1766cedb8b05"]}, @generic="a07aa87607b627286ebe79a15ca053b731fcaaf75b197ab17e067f1bca50d4fb05d2fc4ac2bd4dc0054e2c8de71538c5c6ad716b709979df4f13349a9abd37d018887dfe68618efef9440715b1e46d9e2161147a9fcbada07febd252f3e6472f63de3b0275a9b9b52c8d9bb5d1bd9d12b6d9fca40108e6135e77c3b792104cf723a3f3b24b3c142d7d6bcbab3d870c6f0e80e13ebd462151b2d82c5948ed710650c840714bdabfa4dd6c7c02030656d2f072439a1f9baf402d61c5835fb5cf092fb2b08476aa48a4723f658ae34ade3fae77f5"]}, 0x258}, 0x1, 0x0, 0x0, 0x4020044}, 0x8801) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r1, &(0x7f0000000240)=""/83, 0xa8, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f00000000c0)=ANY=[@ANYBLOB="4c1a0396e1e084ae"]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5390, &(0x7f0000000940)=@physical={0x0, 0x2, [{0x7, 0x8, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x4, 0x400, 0xb14e}, {0x3, 0x3, 0x6, 0x5, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, 0xea6, 0x2, 0x8}, {0x8, 0x7, 0x8, 0x8, 0xd, 0x0, 0x2, 0x4, 0xc, 0x1, 0x2d, 0x7f, 0xda82}, {0x3, 0x7, 0x1, 0xe, 0xc, 0x1, 0x3, 0x6, 0x0, 0x1, 0x7c, 0x7, 0x400}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$FITRIM(r4, 0xc020662a, &(0x7f0000000080)={0x0, 0xfff7fffffffffff7}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r4, 0x40505330, &(0x7f0000000040)={{0x3, 0x7}, {0x8, 0x81}, 0xfff, 0x1, 0x6}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:50:52 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x225) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:50:52 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:50:52 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x101200, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:50:52 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{0x304}, "ad7a29976f6f0235", "87a4980b0d5d0ef73a048d5ecefe1c1f", "1eb62821", "7f72e4b64735ea4f"}, 0x28) fcntl$getown(r0, 0x9) 14:50:52 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:50:52 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:50:52 executing program 3: syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1000, 0x3, 0x0, 0x0, 0x0, 0x20000000, 0x3ff, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) writev(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000700)='clear_refs\x00') syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESOCT=r0, @ANYRESDEC, @ANYRESHEX, @ANYBLOB="38463778770297923e79ff9af4ec0b79ea3fc2a2bd54ac9811006283b48b2d1237ad25c3fcb2f337f784e2eefb0ffdd9bb0bb3d3edc55f96f621c27d136d6b15615911c43dd20a1fa67220b16a6f6c3fdbc98d0698d578a4798b531691533f4e370fa2c9f6460cec096e4e925d272d"], 0x68}, 0x1, 0x0, 0x0, 0x54}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40094}, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r5, 0x4, 0x2400) fcntl$setstatus(r5, 0x4, 0x0) dup2(r5, 0xffffffffffffffff) 14:51:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r0, 0x0, 0x1, 0x0, &(0x7f0000001080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$FITRIM(r1, 0xc020662a, &(0x7f0000000080)={0x0, 0xfff7fffffffffff7}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, 0x0) r2 = accept4(r1, &(0x7f0000000140)=@nfc_llcp, &(0x7f00000001c0)=0x80, 0x0) copy_file_range(r2, 0x0, r0, 0x0, 0x32ab00000000, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) 14:51:08 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:51:08 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:51:08 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x121000, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:51:08 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x9) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r1, 0x4, 0x2400) fcntl$setstatus(r1, 0x4, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)=0x1) 14:51:08 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x281) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:51:08 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)=ANY=[@ANYBLOB="8358ea86bcc1408b3ac57d23e4e6bec4a319e07771bf8f0de021dfd697b31329857ce3b510a039c0e531f8c2c1e540b54e8e6d3adfc9878aefb65c5d8b487846124acfecd134653ce4f5456c8097602973b33d7b10210a51381b53bfbb422a318ee9657d6baf1003d6ac1be5214aa42f97ba13166ce66f"]) r1 = open_tree(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x9100) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x204, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x5, 0xc0, 0x81, 0x80, 0x0, 0x4, 0x10400, 0x6, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f0000000280), 0xa}, 0x4000, 0x0, 0x7, 0x5, 0x7fffffff, 0x0, 0x7, 0x0, 0x6, 0x0, 0xd7c}, 0x0, 0xc, r1, 0x1) r2 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0xaa, 0x1, 0x2, 0x0, 0x7f, 0x940d0, 0xb, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfffffff9, 0x2, @perf_config_ext={0x5, 0x2}, 0x0, 0x7, 0x4, 0x2, 0x20, 0xffffff26, 0x3, 0x0, 0x101, 0x0, 0x59}, 0x0, 0x1, r2, 0x2) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r3 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}, 0x0, 0x0, 0x0, 0x7db82b1b460a0dbe}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) syz_io_uring_setup(0x1d, &(0x7f0000000100), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0xfc292a8c574ae91a}, 0x0) syz_io_uring_setup(0x1d, &(0x7f0000000100), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0xfc292a8c574ae91a}, 0x0) syz_io_uring_submit(r5, r8, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000fec000/0x14000)=nil, 0x14000, 0xd}, 0x0) 14:51:08 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:51:08 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) splice(r1, 0x0, r0, &(0x7f0000000180), 0x81, 0x0) 14:51:08 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x400000, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:51:08 executing program 5: ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f00000000c0)={0x1, 0x6, 0xbc, &(0x7f0000000000)=""/188}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x9) 14:51:08 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r3 = creat(&(0x7f0000000040)='./file0\x00', 0xe) r4 = perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6, 0xc3031, r3, 0x0) syz_io_uring_setup(0x1d, &(0x7f0000000100), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0xfc292a8c574ae91a}, 0x0) r8 = signalfd4(r1, &(0x7f0000000140)={[0x200]}, 0x8, 0x80000) r9 = openat(0xffffffffffffffff, 0x0, 0x2d3242, 0x84) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd, 0x1, {}, 0xd68, 0x0, 0x0, {0x0, r10, r9}}, 0x1) syz_io_uring_submit(r5, r7, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, r8, 0x0, &(0x7f0000000180)='./file0\x00', 0x63, 0x10200, 0x12345, {0x0, r10}}, 0x3) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:51:08 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x2dd) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:51:08 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x600000, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:51:08 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) fcntl$getown(r0, 0x9) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, &(0x7f0000000000)={0x42c, {{0x2, 0x4e22, @rand_addr=0x64010102}}, {{0x2, 0x4e21, @multicast1}}}, 0x108) 14:51:08 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:51:08 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x3, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000006c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$FITRIM(r3, 0xc020662a, &(0x7f0000000080)={0x0, 0xfff7fffffffffff7}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x80, 0x2, 0x9, 0xaa, 0x1, 0x0, 0xa69a, 0x8, 0x4, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xf7, 0x401}, 0xc02, 0x10001, 0x0, 0x5, 0xffffffffffffe75f, 0x1f, 0xffe0, 0x0, 0x7306cbe6, 0x0, 0x3}, r0, 0x7, r3, 0xc) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:51:25 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r3 = creat(&(0x7f0000000040)='./file0\x00', 0xe) r4 = perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6, 0xc3031, r3, 0x0) syz_io_uring_setup(0x1d, &(0x7f0000000100), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0xfc292a8c574ae91a}, 0x0) r8 = signalfd4(r1, &(0x7f0000000140)={[0x200]}, 0x8, 0x80000) r9 = openat(0xffffffffffffffff, 0x0, 0x2d3242, 0x84) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd, 0x1, {}, 0xd68, 0x0, 0x0, {0x0, r10, r9}}, 0x1) syz_io_uring_submit(r5, r7, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, r8, 0x0, &(0x7f0000000180)='./file0\x00', 0x63, 0x10200, 0x12345, {0x0, r10}}, 0x3) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:51:25 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:51:25 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x50000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000006c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) syz_io_uring_setup(0x1d, &(0x7f0000000100), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0xfc292a8c574ae91a}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x28, 0x1a, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0xc, 0x1d, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xffffffffffffffff}]}]}, 0x28}}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000400)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r5, 0x0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/24, 0x18}, {&(0x7f0000000140)=""/155, 0x9b}, {&(0x7f00000002c0)=""/192, 0xc0}], 0x3, &(0x7f0000000380)=""/92, 0x5c}, 0x0, 0x2020}, 0x7) fcntl$dupfd(r0, 0x0, r1) socket$netlink(0x10, 0x3, 0x13) 14:51:25 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:51:25 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x80ffff, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:51:25 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x339) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:51:25 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101040, 0x99) pread64(r0, &(0x7f0000000380)=""/87, 0x57, 0x8) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$FITRIM(r3, 0xc020662a, &(0x7f0000000080)={0x0, 0xfff7fffffffffff7}) sendfile(0xffffffffffffffff, r2, &(0x7f0000000340)=0x1, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x80, 0x6, 0x4, 0x6, 0x0, 0x7f, 0x924, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xd681, 0x4, @perf_bp={&(0x7f0000000040)}, 0x8000, 0x5, 0x6, 0x3, 0x3f, 0x3157, 0x6, 0x0, 0x9, 0x0, 0xb4a}, 0xffffffffffffffff, 0xf, r3, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="280000001a00210c00000000000000000a00000008000000", @ANYRES32, @ANYBLOB="97ef0dbf9b1e71d0d9f1e19a5e6500168008008957c1fb4c2577af51f5fa84543d5eeecd7e9da5418d885fdc72fb612622e1ac8fd8e18e86a056d39efe8a03ced6f5462ee82389e20b2f6305a8f061cc048738b8b375a293f614ef48dda97e98a69c9f00c410a920c55f5c", @ANYRES32, @ANYBLOB="8d5741198be7da135fb5c03286f572743d"], 0x28}}, 0x0) ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f0000000300)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:51:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x9) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000005eb40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005fb40)={0x401, [{}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}], 0x1, "4cb878f1e99b05"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f000004fa00)={0x0, 0x0, "c70c77d358660b9120ed15d7bfebd75dbb73047e2946f343c8ea7a1b9d702bf600bcf0819a1bef4561261548b9b515d2e933b005f0f38f58b3a0d86b78bfe7ce2f2c3befa33d9cb29551d98c3ee9f46207dac66dc73a3e767cf0b9d36ddfbc1194e07cc463751415913ef1b42648a7172ade48cfb93b070d40771e4b760fc9abbf62e67b88b17954278aad95c76d60d147eae955c0d6ac62c3c71870ec80886149a4bccb23fdf030c52b023ef9c6c877f8866ca1b71e7304c188e961fa29b9900d4f6e4b7f3081e436c8244954c20ed2b8fff0b52ac0f361ce6133ea60a4043209d28efc5c91af970348b55011efb77dc94d5ac7952c1d7529503145f779afe4", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000056b00)={{0x0, 0x8, 0x7, 0x0, 0x3, 0x5, 0x6, 0xffff, 0x3, 0x1, 0x0, 0x2, 0x3f, 0x1000, 0x5}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {r4, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4, r7}], 0x80, "5fabd34a60e47f"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000840)=ANY=[@ANYRES64=0x0, @ANYBLOB="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"]) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050ac0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000050cc0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000050ec0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000056b00)={{0x0, 0x8, 0x7, 0x0, 0x3, 0x5, 0x6, 0xffff, 0x3, 0x1, 0x0, 0x2, 0x3f, 0x1000, 0x5}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13, r16}], 0x80, "5fabd34a60e47f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000510c0)={0x3f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r3}, {0x0, r7}, {}, {r9, r10}, {}, {0x0, r11}, {0x0, r12}, {0x0, r16}], 0x20, "429e60adccd7ca"}) [ 1753.771522] netlink: 'syz-executor.7': attribute type 29 has an invalid length. [ 1753.780545] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1753.824576] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1753.856578] netlink: 'syz-executor.7': attribute type 29 has an invalid length. 14:51:40 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:51:40 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000080)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000500)=ANY=[@ANYBLOB="d20a8ab25800618fbfa062d7620e5ad5f88a4ffcd5f8a8cf068b53b7ca2121342ecd4dab261f2fd2c4a23d7d94f00e39aa3947b4fe9189cc7a39ee82d9ef7f7a02007dde013d5ade66d43b93996cf414fd1d2a167b0613ab1daf822ad66eea9ebaedaa4e631cc6d9db8885cd8f118cb0b42f128135b42b1fc42e68d5b185bab18188b3f47af4baaaf8d313127323b1414827b15d47cdd5a9eda9d3e6e00870103ebd6ace70b7a2d28195d10894a81fda37198c6e0690547f49975950801c809bb8"]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000140)={'syz_tun\x00', 0x101}) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) flock(r2, 0x4) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) 14:51:40 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x7, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x1720, &(0x7f0000000080)={0x0, 0xfffffffc, 0x10, 0x1, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000140)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f00000002c0)) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:51:40 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:51:40 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x9) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r1, 0x4, 0x2400) fcntl$setstatus(r1, 0x4, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)=0x1) 14:51:40 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000009) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:51:40 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0xc0ff20, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:51:40 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x9) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 14:51:40 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x9) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r1, 0x4, 0x2400) fcntl$setstatus(r1, 0x4, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)=0x1) 14:51:40 executing program 5: prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000008340)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000008080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f00000080c0)) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000007e40)=[{{&(0x7f0000008380)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/108, 0x6c}, {&(0x7f0000000100)=""/166, 0xa6}], 0x2}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000200)=""/247, 0xf7}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/107, 0x6b}, {&(0x7f0000001380)=""/108, 0x6c}], 0x4}}, {{&(0x7f0000001440)=@abs, 0x6e, &(0x7f00000016c0)=[{&(0x7f00000014c0)=""/180, 0xb4}, {&(0x7f0000001580)=""/72, 0x48}, {&(0x7f0000001600)=""/159, 0x9f}], 0x3, &(0x7f0000001700)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/139, 0x8b}, {&(0x7f0000001880)=""/125, 0x7d}, {&(0x7f0000001900)=""/68, 0x44}], 0x3, &(0x7f00000019c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="08008000000000000000000001000000fe000000", @ANYRES32, @ANYRES32], 0xd0}}, {{&(0x7f0000001ac0), 0x6e, &(0x7f0000003fc0)=[{&(0x7f0000001b40)=""/231, 0xe7}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/28, 0x1c}, {&(0x7f0000002c80)=""/22, 0x16}, {&(0x7f0000002cc0)=""/37, 0x25}, {&(0x7f0000002d00)=""/213, 0xd5}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000003e00)=""/129, 0x81}, {&(0x7f0000003ec0)}, {&(0x7f0000003f00)=""/144, 0x90}], 0xa}}, {{&(0x7f0000004080), 0x6e, &(0x7f0000004340)=[{&(0x7f0000004100)=""/154, 0x9a}, {&(0x7f00000041c0)=""/191, 0xbf}, {&(0x7f0000004280)=""/66, 0x42}, {&(0x7f0000004300)=""/33, 0x21}], 0x4, &(0x7f0000004380)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f00000043c0), 0x6e, &(0x7f0000005800)=[{&(0x7f0000004440)=""/80, 0x50}, {&(0x7f00000044c0)=""/208, 0xd0}, {&(0x7f00000045c0)=""/62, 0x3e}, {&(0x7f0000004600)=""/28, 0x1c}, {&(0x7f0000004640)=""/204, 0xcc}, {&(0x7f0000004740)=""/156, 0x9c}, {&(0x7f0000004800)=""/4096, 0x1000}], 0x7}}, {{&(0x7f0000005880), 0x6e, &(0x7f0000007d40)=[{&(0x7f0000005900)=""/4096, 0x1000}, {&(0x7f0000006900)=""/157, 0x9d}, {&(0x7f00000069c0)=""/4096, 0x1000}, {&(0x7f00000079c0)=""/3, 0x3}, {&(0x7f0000007a00)=""/45, 0x2d}, {&(0x7f0000007a40)=""/127, 0x7f}, {&(0x7f0000007ac0)=""/248, 0xf8}, {&(0x7f0000007bc0)=""/125, 0x7d}, {&(0x7f0000007c40)=""/226, 0xe2}], 0x9, &(0x7f0000007e00)=[@cred={{0x1c}}], 0x20}}], 0x8, 0x60, &(0x7f0000008040)={0x77359400}) r2 = syz_open_dev$vcsu(&(0x7f0000003ec0), 0x2, 0x98000) fcntl$getown(r2, 0x9) getdents64(r2, &(0x7f0000008300)=""/49, 0x31) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000008100)) 14:51:40 executing program 4: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0xec, 0x20, 0x9, 0x80, 0x0, 0x7, 0x40, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xe6b3, 0x2, @perf_config_ext={0x6, 0x1}, 0x40080, 0x6, 0x5, 0x3, 0x5, 0x5, 0x3, 0x0, 0x10000, 0x0, 0x7}, r1, 0x2, r0, 0x3) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r2, &(0x7f0000000240)=""/83, 0x53, 0x200000048) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:51:40 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x1000000, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:51:40 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$FITRIM(r0, 0xc020662a, &(0x7f0000000080)={0x0, 0xfff7fffffffffff7}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8000000}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, 0x0) syz_io_uring_setup(0x4e73, &(0x7f00000002c0)={0x0, 0x68ef, 0x8, 0x1, 0x3d1, 0x0, r1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x2, 0x2, &(0x7f0000000340)="8e1d88081b3d8b7da704477ef5dcaf17b235259bf129c1b03f0c9aa71eb28ab645", 0x7}, 0x1) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x20, 0xdb, 0x5, 0x0, 0xfffffffffffffff7, 0x20020, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x3, 0x10000, 0xfffffffc, 0x7, 0x80, 0xfff, 0x7ff, 0x0, 0x1, 0x0, 0x1}, 0x0, 0x4, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:51:40 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:51:40 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x10, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) recvmsg$unix(r0, &(0x7f0000000440)={&(0x7f0000000380), 0x6e, &(0x7f0000000400)=[{&(0x7f0000000500)=""/178, 0xb2}, {&(0x7f00000005c0)=""/162, 0xa2}, {&(0x7f0000000180)=""/18, 0x12}], 0x3, &(0x7f0000000680)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}, 0x12000) perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x6, 0x4, 0x1, 0xeb, 0x0, 0xa204, 0x8480, 0x6, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={&(0x7f0000000040), 0x3}, 0x45001, 0x8, 0xff, 0x2, 0xfffffffffffffffd, 0x6, 0x2, 0x0, 0x1, 0x0, 0x34d}, r2, 0x8, r0, 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000001e00)) r4 = fsopen(&(0x7f0000000140)='hfsplus\x00', 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) 14:51:40 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:51:40 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x9) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r1, 0x4, 0x2400) fcntl$setstatus(r1, 0x4, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)=0x1) 14:51:40 executing program 7: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) r2 = syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r3 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_io_uring_setup(0x1d, &(0x7f0000000100), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0xfc292a8c574ae91a}, 0x0) syz_io_uring_setup(0x3ab, &(0x7f0000000040)={0x0, 0xf718, 0x1, 0x1, 0x10d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000180)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4) r7 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) fcntl$dupfd(r2, 0x0, r0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r7, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:51:40 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x2000000, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:51:40 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x9) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r1, 0x4, 0x2400) fcntl$setstatus(r1, 0x4, 0x0) 14:51:40 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$FITRIM(r0, 0xc020662a, &(0x7f0000000080)={0xffffffffffffffff, 0x3, 0x3}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) fcntl$setstatus(r3, 0x4, 0x2400) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000000)={0x2, 0xffffffff, 0x8, 0x80000003, 0x7, 0xb7}) fcntl$getown(r3, 0x9) 14:51:40 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:51:41 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x9) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r1, 0x4, 0x2400) 14:51:41 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$incfs(r3, &(0x7f0000000180)='.log\x00', 0x400000, 0x20) pwrite64(r3, &(0x7f00000000c0)="04", 0x1, 0x3ff03) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="24000000af8e688a1509883fb5d7f826f067d58260314d37d8fbf6ab5da48db3e9608cf228ed1e4ffa98fb4ed26573d823e6def0af08c7c3f00103273bc5b7553cea968dbc632bddd32c5852f69f4e1cbeac449be7754eb8a323bd2a9d5aac19d2fc39b0eb224cd3841821a32f06d2d14164022de885eb6f2d8ef8d701938c803842b1313d749be7b4387f5e24aae32f2ac8224d7f1823ec1d30db6cc1fc97", @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="0800050002ec9f00"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000610693a3d2e88afb4d525081f3657e8ce4c7e49edcd5d1632f7ffb9cec99c04d0a2086e8b3b6290eb38914e2dfa517f2dfc229c89490bcd0431f4fc1f039d34a9688cda36a73685ac935be39f12b71c04965ff032811bbe8d8ae4b7f4d80057db3c7bf75ea2086370cf924725556a3d395fc3602b40f67d55d4c8aa6b1f8ffcd6cd198fc", @ANYRES16=r2, @ANYBLOB="050000000000000000103100000001012100", @ANYRES32=r4, @ANYBLOB="20002a00dd066162636465666512505050505050ffffffffffff080211000001"], 0x3c}}, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0xac, r2, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x68}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x10}, @NL80211_ATTR_IE={0x64, 0x2a, [@gcr_ga={0xbd, 0x6}, @supported_rates, @measure_req={0x26, 0x54, {0x3f, 0xff, 0xff, "634ccc03087ec8f5c5ec913cf492b5262a56960790a13771173a9703408daabf84a108124ce0012b02d72839f4d469ffc30013ae9dcc5ace13189665613bc4afcb5c4b10aeebbeefcde35a608103cf3af1"}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2d}]}, 0xac}, 0x1, 0x0, 0x0, 0x2}, 0x4000) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r6 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:51:41 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x4000000, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:51:41 executing program 7: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000040)=[r0], 0x1) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:51:41 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x100010, r1, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000000500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0cf77d09000000ff0000000001ffffbf00000000040000ffff0002ffffffff000008000000000000000000ea54ffff211005000100000000250000000020"]}, @devid=r6}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r7, 0x4, 0x2400) fcntl$setstatus(r7, 0x4, 0x0) fcntl$setown(r7, 0x8, 0xffffffffffffffff) 14:51:56 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x9) syz_open_dev$tty1(0xc, 0x4, 0x3) 14:51:56 executing program 0: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x6) pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYBLOB="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"/474]) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r3 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x289b, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r6, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r7}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) 14:51:56 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r0, 0x80, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e22, @multicast2}, 0x2, 0x1, 0x2, 0x4}}, 0x0, 0x0, 0x1, {0x0, r4}}, 0x7ff) r5 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r6 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r6, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:51:56 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:51:56 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x5000000, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:51:56 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x80000, 0x4a) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:51:56 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:51:56 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x9) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400) 14:51:56 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x9) flock(r0, 0xd) 14:51:56 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x20000000000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000006c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:51:56 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x9) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400) 14:51:56 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000500)={r7, 0x4, 0xd369}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r6}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) 14:52:11 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x6000000, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:52:11 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) r1 = socket$inet_icmp(0x2, 0x2, 0x1) fcntl$getown(r1, 0x9) 14:52:11 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x9) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400) 14:52:11 executing program 4: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_STATX={0x15, 0x0, 0x0, r4, &(0x7f0000000500), &(0x7f0000000380)='./file0\x00', 0x400, 0x800}, 0x5) r5 = fork() r6 = open_tree(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x9100) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x204, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r6, 0x0) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x5, 0xc0, 0x81, 0x80, 0x0, 0x4, 0x10400, 0x6, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f0000000280), 0xa}, 0x4000, 0x0, 0x7, 0x5, 0x7fffffff, 0x0, 0x7, 0x0, 0x6, 0x0, 0xd7c}, r5, 0xc, r6, 0x1) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x19, 0x35, 0x56, 0xa3, 0x0, 0x9, 0x10010, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x418, 0x2, @perf_config_ext={0xdaed, 0x8}, 0x12000, 0x7, 0x4e2a0, 0x0, 0x800, 0x5, 0x7, 0x0, 0x4, 0x0, 0x5}, r5, 0xb, r0, 0x0) pread64(r3, &(0x7f0000000240)=""/83, 0x53, 0x200000048) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r8, 0x84009422, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000d, 0xf3378bce3af8897c, r1, 0x8000000) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) syz_io_uring_submit(r9, r2, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000140)={r10, r11+60000000}, 0x1, 0x0, 0x1}, 0x7fff) 14:52:11 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:52:11 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}, 0x2500}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:52:11 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r3 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB]}, @devid=r5}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r5, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r6, 0x40046629, &(0x7f0000000040)) 14:52:11 executing program 0: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x30, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x28000000}, 0x10) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r6}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) 14:52:11 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r1, 0x4, 0x2400) 14:52:11 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x996}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004001}, 0x855) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r1, 0x4, 0x2400) fcntl$getown(r1, 0x9) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r2, 0x4, 0x2400) fcntl$setstatus(r2, 0x4, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x800) 14:52:11 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000300)={0x0, 0x400000, 0x1, 0x3, 0x348}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000040)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) io_uring_enter(r0, 0xa51, 0x4c95, 0x3, &(0x7f0000000100)={[0x6]}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:52:11 executing program 7: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f00000003c0)=ANY=[@ANYBLOB="1ec12390e78906fd031b10786cf04b960c0d3538141ac63c5307b71d8ff0d11940f63bb6584cb175cd61ca117f50e907009548f044e9388813fb6b7cc9703cfcab47c93cb56d058f0183028272c871d49763e6c9d455bd0b671ef9756076927bae3e86a62d36b7f700978ad5ca6b36e4"]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x8a00, 0x0) fcntl$setstatus(r0, 0x4, 0x2c00) r3 = fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="01007b23b7b0000001000000", @ANYRES32=r0, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r5, 0x4, 0x2400) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000ac0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, 0x0) r6 = dup(r0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/229, 0xe5, 0x1, &(0x7f0000000500)=""/215, 0xd7}, &(0x7f0000000180)=0x40) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:52:12 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x8000000, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:52:27 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) 14:52:27 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:52:27 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0xc000000, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:52:27 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4207, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_config_ext, 0xec6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xa, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:52:27 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000140)=ANY=[@ANYBLOB="c50886b1daf32d6e4201f63afa27c603cf17273d996b21e3df2d683b55e69ddab64a503c1bde751f4ac0efbd5882c400c179ce8482ccec092b9540240927a009d7b498daf934fe2397b3ac549809d7127d0ce7bf39c887f00592801a00654ec99131fda68bd8d9eabe5920abe0cfd4ceed00769c93e7d90c7e7f028c3a2025d7868d8ddf267df645ebf868e43904d5b7780af2f3700196a5ee81ea442dfc41726541117cc8862892efdf34d8bd456cf7"]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000300)=0x1c) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000006c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="0000050000f322e3dff6e0b70f08fea471693f40540e0000000066696c380000"]) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r2, 0x4, 0x2400) fcntl$setstatus(r2, 0x4, 0x0) r3 = fork() r4 = open_tree(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x9100) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x204, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r4, 0x0) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x5, 0xc0, 0x81, 0x80, 0x0, 0x4, 0x10400, 0x6, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f0000000280), 0xa}, 0x4000, 0x0, 0x7, 0x5, 0x7fffffff, 0x0, 0x7, 0x0, 0x6, 0x0, 0xd7c}, r3, 0xc, r4, 0x1) fcntl$lock(r2, 0x26, &(0x7f0000000040)={0x2, 0x3, 0xb4, 0x9, r3}) 14:52:27 executing program 5: mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1000000, &(0x7f00000000c0)={'trans=unix,', {[{@cache_loose}, {@posixacl}, {@msize}, {@cachetag={'cachetag', 0x3d, '&:u-\''}}, {@loose}], [{@euid_gt}]}}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x9) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r1, 0x4, 0x2400) fcntl$setstatus(r1, 0x4, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000140)={0xc, 0x0, {0x10000, @struct={0xd8f, 0x5}, 0x0, 0x10000, 0x1f, 0x4a6, 0x0, 0x10000, 0xbe, @usage=0x400, 0x40, 0xe7, [0xfff, 0x3d, 0x0, 0x4, 0x9, 0x8]}, {0x4, @struct={0x6}, 0x0, 0x7, 0x400, 0x7fff, 0x3ff800000000, 0x6, 0x29, @usage=0xd85a, 0x1836, 0x5, [0x8001, 0x7, 0x6, 0x7, 0xffffffff, 0x4]}, {0xe42, @usage=0x4, 0x0, 0x8, 0x2, 0x84, 0x0, 0x2, 0x52, @usage=0x6, 0xfffffffe, 0x6c, [0x2, 0x7, 0x5, 0xcf4, 0xfc1b, 0x20]}, {0x5, 0x1, 0xff}}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000540)={r2, 0x9, 0x8}) 14:52:27 executing program 0: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000000}}, './file0\x00'}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r6}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) 14:52:27 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r3 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB]}, @devid=r5}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r5, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r6, 0x40046629, &(0x7f0000000040)) 14:52:27 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) 14:52:27 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r1, 0x4, 0x2400) fcntl$setstatus(r1, 0x4, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000000)) fcntl$getown(r0, 0x9) 14:52:27 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) fcntl$getown(r0, 0x9) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:52:27 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x10000000, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:52:27 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYBLOB="7c3bb577b1260761341555f950dbd158081bdfef4410ff070000b1bad2f291ed700ea5efafee54a681d928f760affd2b8f62aed1de452400b3923bc6459a7f520f35314d6eb1a7d7c28adcf495dc347e5bd126bb46aff9f7509cf526722a267dbe45c9b6522e5c276f380cf0ca7e2f7f7a8434a2f6a21994d9708f468e64881c447021bc4c0e01c20f5b3ffffb083310499d75fd995ded6dc3146cbd78f33f87d9c1f36cda163f7b1b48d54c2d0094bde17b6b0e881fa59ae90c46972555c33c95095b4c97fa8e62e68df96139a6211d8f9a128930983f059d5995eef1e1a68300000000000000e352c3cfcb84b5c1cec8b2d515"]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f0000000040)={r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$FITRIM(r4, 0xc020662a, &(0x7f0000000080)={0x0, 0xfff7fffffffffff7}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x12, r4, 0x10000000) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r6}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:52:27 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) 14:52:27 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r4, 0x4, 0x2400) fcntl$setstatus(r4, 0x4, 0x0) r5 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x80000000, 0x40000) fcntl$dupfd(r4, 0x406, r5) fcntl$setstatus(r3, 0x4, 0x2400) fcntl$setstatus(r3, 0x4, 0x0) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000040), &(0x7f0000000080)={'U+', 0x2}, 0x16, 0x3) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:52:27 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r3 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB]}, @devid=r5}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r5, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r6, 0x40046629, &(0x7f0000000040)) 14:52:27 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDMKTONE(r0, 0x4b30, 0x0) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x9) 14:52:27 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:52:42 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x12000000, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:52:42 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x28, 0x1a, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0xc, 0x1d, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xffffffffffffffff}]}]}, 0x28}}, 0x0) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000140)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x8c, 0xa, 0x6, 0x401, 0x0, 0x0, {0xc, 0x0, 0x8}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_ADT={0x70, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @multicast}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x2000c8a0}, 0x4000001) fcntl$getown(r0, 0x9) 14:52:42 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xd, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$FITRIM(r1, 0xc020662a, &(0x7f0000000080)={0x0, 0xfff7fffffffffff7}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, 0x0) process_madvise(r1, &(0x7f0000000040)=[{&(0x7f0000000300)="0d4059e4bc325ae4b83480903ff4c9aef042152902563c4bc3bfef2e428ad9aa57fba53dd0fcea19b6190ef35db125fae5d0c77456a6383e668a597addb3daccf1e925ccb4707a69c5a690fa72c2a4818b3629661e9bf8e48d8b99605ccddd059bb36527fea0534e46b8e7798aaaccfc3970a3a3f993dd1e506509fd73cc08545810b7deaccf3b63656fc5ce238d62ebef03bbb3c63e92df6540f4f2c4c178e5f14906fa47830fdae29eb71f8f4a20c9727d8aac4ad2a9fd3e58c9b34c1a2f46ea05124d2af6d6c41a0e7b3475380731881006afd8cc6ff9279c065e87cee6bc9ced41c80a9992", 0xe7}, {&(0x7f0000000500)="ea3517d6b3cc506f7b5c0cd0b66ebd06ee5036c5665404ebb962361881e3e9a86cb13ad2fda8db0bb195f25dbcc8ea672df209a657c345b51d53a3e5661c303f391dbd657daa63e3066a0a230fbcbbaef109c8da66466c9557a808a2b3ec1641811f5bc1eeaa72ed8684123040fe91a8f1ed2ccf3b3d144ec8d5000670aa6b6856fb32ca3c62c180a4a13cb5e74866944b2de9e5cd3087ba0be2da3c93d1279b0a8553398df0d12a703f6fbd25b69fbf68b5040acba63a14e31f7b974306d1f8a11d3b97ee78c5cc59da515de5b6360f6da3c0ee4c8010862d46d1df67809c", 0xdf}, {&(0x7f0000000600)="271aae4681865389f41a13f0d5197a0bc9f12732a435e187c358c80fd57b10c5fc9bc95ca1752b9196f6f94106c956e0242d0f06b53f4fc18137493d34082c237974996a966cd9d5b1241857e723886be14209c3b635d06f41a61e8cce97dbbc778358612c19caeacf602264678f8478974353f7d8735ff6d13c98536d1d7c27b27a868eea4cbab57e442798c7ebe288aa1ca8fbeaccd143b76c14f932113831e1f57d2b802a77ca2c3d52346a5b9798860b75945d67be75", 0xb8}], 0x3, 0x13, 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r6}) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) 14:52:42 executing program 2: unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:52:42 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$FITRIM(r2, 0xc020662a, &(0x7f0000000080)={0x0, 0xfff7fffffffffff7}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, 0x0) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1d, &(0x7f0000000100), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0xfc292a8c574ae91a}, 0x0) syz_io_uring_setup(0x1d, &(0x7f0000000100), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0xfc292a8c574ae91a}, 0x0) syz_io_uring_submit(r4, r7, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xe2, 0x1}, &(0x7f0000000140)='./file1\x00', 0x18, 0x0, 0x23456}, 0xf61) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:52:42 executing program 7: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') signalfd4(r0, &(0x7f0000000040)={[0x4]}, 0x8, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x8c001) pread64(r2, &(0x7f0000000080)=""/86, 0x7c, 0x200000248) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r3 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:52:42 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:52:42 executing program 3: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) [ 1830.976195] netlink: 'syz-executor.5': attribute type 29 has an invalid length. 14:52:42 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="6a59fdeb"]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) [ 1830.982585] netlink: 'syz-executor.5': attribute type 29 has an invalid length. 14:52:42 executing program 3: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) 14:52:42 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:52:42 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x9) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$setown(r0, 0x8, r1) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) fcntl$getown(r0, 0x9) 14:52:42 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x18000000, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:52:42 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:52:42 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:52:42 executing program 2: unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:52:58 executing program 3: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) 14:52:58 executing program 2: unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:52:58 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x0, 0xff}, 0x18455, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:52:58 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB="6f07563965ff592f7d79609be79e992cdc16365fe9a7c556382d4fca6ed4867581bba5a86f7314a6d1dbdfbee8e62b44f682833fec9a942a358895fdbc793da9bb8470a8b904cb87e932666357fea3e87492d3bce5a83bb19f4528d5f5638b5e40f44f6de1d4846179d44352c59c4e4b0fa36654cf6bc687ab56595b6eb3ec19cf8b79a4aef1cd00281041349d1c5aa8c584079c62c3a07435ff615f0441d739b9c3e19e7e1b"]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:52:58 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fcntl$setstatus(r1, 0x4, 0x4800) pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:52:58 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getown(r0, 0x9) 14:52:58 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x1e000000, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:52:58 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000040)) 14:52:58 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) r1 = timerfd_create(0x2, 0x80000) dup2(r1, r0) fcntl$getown(r0, 0x9) 14:52:58 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r1, 0x4, 0x2400) 14:52:58 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x20ffc000, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:52:58 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000140)=ANY=[@ANYBLOB="f813fd6e02f2fb513b04a61e93697051fdeb949a295a837e08d82aaf0b33482c35b92df69602a822d36cd01b2b92abad0e46c9974538d6e7c1e5e12b0f6352d4caa62bfdbb06747b46aea5337e5e69941cec0fac118ebfb08afcec80adea3640fbfbb53809cd7063c0060bd4a63d6b66a3d31667876a233204433646df12bdafb4cfbf272a7bd193145835feb005e3b9a75bc97f1a2206882320c2ae689e4cd96f6d26ab68b1444d6ed01acf6e4b3a6a5f2ca709e2776ac1a792"]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1, 0x40, 0x3f, 0x3f, 0x0, 0x0, 0xa0, 0x4, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, @perf_config_ext={0x80000001, 0x1f}, 0x50000, 0x2ddc, 0xff, 0x6, 0x3, 0x2, 0x9}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0xb) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000006c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:52:58 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$FITRIM(r4, 0xc020662a, &(0x7f0000000080)={0x0, 0xfff7fffffffffff7}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040)=r4, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:52:58 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) 14:53:14 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x9) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r1, 0x4, 0x2400) fcntl$setstatus(r1, 0x4, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x1000) flock(r1, 0xa) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x189401, 0x0) ioctl$VT_SETMODE(r3, 0x5602, &(0x7f0000000100)={0x58, 0x7, 0x2, 0x400, 0x3f}) 14:53:14 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$FITRIM(r0, 0xc020662a, &(0x7f0000000080)={0x0, 0xfff7fffffffffff7}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[0xffffffffffffffff], 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$FITRIM(r4, 0xc020662a, &(0x7f0000000080)={0x0, 0xfff7fffffffffff7}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, 0x0) perf_event_open(0x0, 0x0, 0x8, r4, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:53:14 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x21010000, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:53:14 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) 14:53:14 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x0) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:53:14 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:53:14 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB="f837043cff913bdda171a927d7796c607b0955f0e8b9934e1de6aab3e79fa5a43a7b072b1ee739e9658bc8287b5e0acfcc300d62ed12c1bb4b73dd1bbd7140fc9604626d802553f02b743312204032c779d4bd7ee61d38c951eca864d2172b197e653f085d0926f1e8aa6c75ed4788fe82c1d0f95d81004c62a8d478c40608"]) r1 = syz_io_uring_setup(0x4d52, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:53:14 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) 14:53:14 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) 14:53:14 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x5, 0x0) connect$unix(r1, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) fcntl$getown(r0, 0x9) 14:53:14 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x24000000, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:53:14 executing program 7: ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040)={0x1, 0xe41, 0x9, 0x7c0000, 0xb, "2d2c470b460e01508b1b29e37ed701240a5e47"}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:53:14 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) 14:53:14 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000340)={"281430dd03fbe031b79e62af183e6f8a", 0x0, 0x0, {0x9, 0xcfac}, {0x8}, 0x7, [0x9b, 0x10000, 0x0, 0x5, 0x5, 0xead1, 0x9, 0x0, 0xfffffffffffffffb, 0x9, 0x4, 0x1, 0xffffffff, 0x7, 0x2, 0x7]}) fcntl$getown(r0, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000440)={{{@in=@multicast2, @in6=@ipv4={""/10, ""/2, @loopback}}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000140)=0xe8) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x74, 0x1c, 0xc21, 0x0, 0x25dfdbfd, {0xa}, [@typed={0x8, 0x2008, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x23}}, @typed={0x58, 0x7d, 0x0, 0x0, @binary="9b0bf4245019e01c69804a79fb13b99c351d6fc541b3ebbc87a9f4c8ac953c95aa7cb044917318bc86e44d63d30f3f8227efe0fbbb39b875b143c542e4dba5854a5d9322e30276ccba144184c801e79a5e19dbe9"}]}, 0x74}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000180)={0xffffffffffffffff, 0x9, 0x6, 0x100000000}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f00000001c0), &(0x7f00000002c0)=0x6) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x4, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) 14:53:14 executing program 4: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffff7f9, 0x6}, 0x0, 0x0, 0x442, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r1, 0x4, 0x2400) fcntl$setstatus(r1, 0x4, 0x0) write$binfmt_misc(r1, &(0x7f0000000500)={'syz1', "75613ff34a06d2a55563c6a30d412a1ffa82178ebdd90e95cb8f4620ea85408e7a7c634df25a311d894fe9fceac660ea38107edd22b25522c70ea0c6be5d6de6dae8ab32e9d9c9845f384000595433bd31cc429d87224ca52653147d257b9800b0fd471d205eb1ca6ca5b5252621a7c46c82bd780795b8ab063b9f138707858c52b538"}, 0x87) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') r3 = perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x1, 0x9, 0xd6, 0x5, 0x0, 0xa8, 0x400, 0xa, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f00000002c0), 0x2}, 0x0, 0x80000000, 0x0, 0x1, 0x3, 0x2, 0x55, 0x0, 0x3, 0x0, 0xe04}, r2, 0x8, r0, 0x0) r4 = dup(r3) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x2, 0x8, 0x6, 0x0, 0x0, 0xfffffffffffffffd, 0x20000, 0x6fe2df785ffd98e6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0xa}, 0x1000, 0x9, 0x60000, 0x4, 0x9, 0xfffffffe, 0x7, 0x0, 0x8001, 0x0, 0x10000}, 0x0, 0x2, r4, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000380)={0x0, 0x0, 0x10, 0x9f}) pread64(r2, &(0x7f0000000240)=""/83, 0x53, 0x200000048) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r6 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x0, 0x1, 0x9, 0x40, 0x0, 0x1, 0x8000, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000040), 0x7}, 0x40000, 0xfe00000000000000, 0x3, 0x3, 0x68af, 0xfff, 0x8, 0x0, 0x6, 0x0, 0x7f}, 0x0, 0x7, r0, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:53:14 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x2a000000, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:53:14 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) 14:53:14 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x4010, r2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x7, 0x0, @fd_index=0x1, 0x6, 0x0, 0x6, 0x6, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = fcntl$getown(r2, 0x9) syz_open_procfs(r6, &(0x7f00000003c0)='sched\x00') ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x80010, r1, 0x8000000) syz_io_uring_submit(r8, r0, &(0x7f0000000180)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, r1, 0x0, &(0x7f0000000300)="0531004fa8c77b30cb09d44099020d767c2cd4c77d1d664c8e5122c2453da3327669ea1acacc7fffdb28df67ca1c6f66b9595f8942d181eb963dbcd8c6c9446a56dcff4f8749642a82becdbec16f5e1f18dd68dca76ad864a13a91fa3729ec29bde569434cf3a4c99533baae7ca61a39d9bbd9ef7380efd3c309ff18737c56fd667d26cc257444b035beffb5ba33d65f6c76b49178cc143a1303f4467670c38bde9c58", 0xa3, 0x12000}, 0xfb) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r7}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) 14:53:14 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x0) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) [ 1862.988579] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11314 comm=syz-executor.5 [ 1862.994095] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11324 comm=syz-executor.5 14:53:14 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) 14:53:32 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x0) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:53:32 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20, 0x0, 0x7, 0x0, 0x1, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:53:32 executing program 7: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x81006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x661}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000040)=ANY=[@ANYBLOB="20bd7678b3dc324135f515fba5fbc3d66f80788ed16ff8f66fdaa7f9dba4c0a92fccf473eb37ae0604ad4c439ac35c4ca92fc37129c0d6af438ecd6e68b1877c82d9f5f41e3959760232227ea9ae7a67d41c8876c6eefad5aefff6cb1689bc269ee3d8bd5604382ff3ac9ba66b95c79142e7e5b08b2366aeb3494ff19672652e915c0a24b2ce4ddbd6e6f4"]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:53:32 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x9) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x29, 0xd2, 0x2, 0x9, 0x2e, @local, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x7, 0x1f, 0x3}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @local}, 0x10) accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x2f, 0x7, 0x6, 0xfffffffe, 0x11, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x7, 0x0, 0x9}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r6, 0x1, 0x6, @local}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x3, 0xba, 0x5, 0x4, @dev={0xfe, 0x80, '\x00', 0x25}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x700, 0xfffff001, 0x5}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r8, 0x1, 0x6, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r9, 0x1, 0x6, @local}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000480)={@initdev, 0x0}, &(0x7f00000004c0)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r11, 0x1, 0x6, @local}, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000500)={0xa14, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}, {{0x8}, {0x1ac, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x0, 0x80, 0x1, 0x7f}, {0x9, 0x40, 0xff, 0xffff8001}, {0x800, 0x80, 0x65, 0xfffffffa}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r2}, {0x1c0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x9, 0x0, 0x20, 0x20}, {0x2, 0x3, 0x2, 0x2}, {0x200, 0x0, 0x7f, 0x400}, {0x4, 0x3e, 0xd6, 0x9}, {0x8, 0x7f, 0x1, 0x101}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3c4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x27}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xad6}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x170, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xbfc4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x50c}}}]}}, {{0x8, 0x1, r10}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x100, 0x4, 0x0, 0x7fffffff}, {0x0, 0xff, 0x3f, 0x80}, {0x1, 0x8, 0x3, 0x4}, {0x81, 0x9a, 0xec, 0xb64}, {0x400, 0x1f, 0x55, 0xffffffff}]}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x9, 0xb8, 0x40, 0x5}, {0x401, 0x2, 0x1, 0x1}, {0x940, 0xfe, 0x2f, 0x5}, {0x9, 0x7d, 0x0, 0x7}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xd6f}}}]}}]}, 0xa14}, 0x1, 0x0, 0x0, 0x4000080}, 0x44) 14:53:32 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB]}, @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000500)={r6, 0x3400000000000000, 0x20, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, 0x0) 14:53:32 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x30000000, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:53:32 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x10, 0x0, 0x5}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:53:32 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) 14:53:48 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) 14:53:48 executing program 5: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x20, r0, 0x1, 0x0, 0x0, {0xa}, [@ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb0, r0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x3c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000004}, 0x4044) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) fcntl$setstatus(r4, 0x4, 0xc00) fcntl$getown(r4, 0x9) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$TIOCSLCKTRMIOS(r5, 0x5457, &(0x7f0000000080)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r6, 0x4, 0x2400) fcntl$setstatus(r6, 0x4, 0x0) dup3(r5, r6, 0x0) 14:53:48 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x0) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:53:48 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) 14:53:48 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x36000000, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:53:48 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) syz_io_uring_setup(0x1d, &(0x7f0000000100), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0xfc292a8c574ae91a}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x4) r3 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r6, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r7}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) 14:53:48 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$setstatus(r0, 0x4, 0x0) preadv(r0, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/218, 0xda}, {&(0x7f0000000040)=""/39, 0x27}, {&(0x7f00000003c0)=""/165, 0xa5}, {&(0x7f0000000140)=""/25, 0x19}, {&(0x7f0000000500)=""/210, 0xd2}], 0x5, 0x40000000, 0x6) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:53:48 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002d00)={{{@in6=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@private1}}, &(0x7f00000001c0)=0xe8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x5, 0x8, &(0x7f0000001780)=[{&(0x7f0000000140)="1ed3b159be7bd7aae3b7bb4658c6d0523f66ed78b21743edc91d8ff857db58754f073463c61a8a4203f59ab7791aa2efb2661a5c553f711f1e26bffbf41f0bf9e27b6b722cd39d057d01e3791decb1629f184969a9b4a823e27dc5e07e40497ff86e5888a7dbbfbd7b0ae2e163f021cbd077b4de2b", 0x75}, {&(0x7f00000002c0)="0ee04aca9456fee64b5d2e9e24f2abef1aded58248201718d8628f9983bb303b8a5c7ad38fb1e1f93effd043c376df7aba9800368f6eb7bb1c52acffece9fc5aa4687ba913f2771592cd540f2db362ed4607ed7378c77f0f14af97afeab8713f939d3a89652e0fbf9f12faacd69fb04181e1d971fbc59336a36f4dc2095048084e0e9cd10428e2d4dde49ba52d3ff7c06800961e354a135baa54e7642ca7e499658735ed764c1d3ff7906e0a0dbd6c67e88eb161d4c37146c77bfcd8b36d950f7d69e9df8657aa11e5c89f59bd8d8951d9fef27e2a494c9c1e0d0f009eaa2e2a8463fbb2b22a34724c278c", 0xeb, 0x5}, {&(0x7f00000006c0)="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", 0x1000, 0x9}, {&(0x7f0000001d00)="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", 0x1000, 0x8}, {&(0x7f00000003c0)="d16f73464eb4d012b53b157b35f8e1cdcbffadf6ebb6e8441f20f09983147304316f0a725089531c0071a058287b828a904547f1a86cd82d0c3c9002a17f59a15bf2b9bd2efb08785f74813450a7ffa20018a88d41394e5269f630ae1170908acfa930f6439597b214a339a5559ebe", 0x6f}, {&(0x7f0000000500)="4cbf1e8ce1745401ec19494d8c71c31719ee0d2de87937af3618c65289319ec4dd1f1b98e0c4b3fccda0ea2920923710af1c156748429e7da88ed91a398935fb36ff7cf01d6fd3111e43d999f5ba82c3a90cc4c1579c4757834794561c14ce95c12433e679ada3796b04e7773fa40c40fe2cf7be19f54e96851cd8d797c78a40fa3ddbdbd61e08e7cf9de4c09a52179d3f6596c23c36bc5005838cc47ac750fb6d6052da838ebb371b7c11ee912ad7153eb70229a7bdfa16924d4a", 0xbb, 0x1}, {&(0x7f00000000c0), 0x0, 0x7}, {&(0x7f00000016c0)="d4051d54406959069078d92f5182538a13bfdca298e461889fbe9a9c5a409186bad5c9090ef5a1de4003b726a07b081cdd7390730eb7bc339ba01dc35f961c3869538df1a0fcc3e8f63fd7f6ef36f866bde4efc243f49d9e8128f93af7cc76be88fd08464673b753edaf05465ed3af8235c3637f38e629674cbc887390cfe1818e7ec2fd0ae084752f731e4c282dc53c5993a85e4a3fccafc473fabb", 0x9c, 0x6}], 0xc0004, &(0x7f0000001840)=ANY=[@ANYBLOB="6e6f6a6f75726e616c5f636865636b73756d2c6e6f6d6263616368652c6772706a71756f74613d2c757365725f78617474722c6e6f757365725f78617474722c6d6561737572652c6f626a5f757365723d5ec16c2c666f776e65723e", @ANYRESDEC=r2, @ANYBLOB=',uid<', @ANYRESDEC=0xee00, @ANYBLOB="2c6f626a742f6e65746c696eeb002c000000000000000000"]) syz_io_uring_setup(0x1d, &(0x7f0000000100), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0xfc292a8c574ae91a}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000000c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x12345}, 0x2) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, 0x0) io_uring_enter(r1, 0x320, 0xa370, 0x2, &(0x7f0000000440)={[0x100]}, 0x8) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:53:48 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400) 14:53:48 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYBLOB="7c3bb577b1260761341555f950dbd158081bdfef4410ff070000b1bad2f291ed700ea5efafee54a681d928f760affd2b8f62aed1de452400b3923bc6459a7f520f35314d6eb1a7d7c28adcf495dc347e5bd126bb46aff9f7509cf526722a267dbe45c9b6522e5c276f380cf0ca7e2f7f7a8434a2f6a21994d9708f468e64881c447021bc4c0e01c20f5b3ffffb083310499d75fd995ded6dc3146cbd78f33f87d9c1f36cda163f7b1b48d54c2d0094bde17b6b0e881fa59ae90c46972555c33c95095b4c97fa8e62e68df96139a6211d8f9a128930983f059d5995eef1e1a68300000000000000e352c3cfcb84b5c1cec8b2d515"]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f0000000040)={r1}) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$FITRIM(r4, 0xc020662a, &(0x7f0000000080)={0x0, 0xfff7fffffffffff7}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x12, r4, 0x10000000) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r6}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:53:48 executing program 5: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) fchdir(r0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r1, 0x4, 0x2400) fcntl$getown(r1, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e22, 0x5, @local, 0x40}, {0xa, 0x4e20, 0x5, @local, 0x7ff}, 0x98d8, [0x2, 0x8, 0x7f, 0xe04, 0x3, 0x6, 0x80000001, 0x3]}, 0x5c) 14:53:48 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') r1 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) pread64(r1, &(0x7f0000000140)=""/83, 0x53, 0x200000048) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r3 = perf_event_open(0x0, 0x0, 0x0, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:53:48 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x2010, r1, 0x8000000) syz_io_uring_setup(0x5234, &(0x7f0000000040)={0x0, 0x3b87, 0x4, 0x1, 0x2c0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_NOP={0x0, 0x4}, 0x5) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:53:48 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400) 14:53:48 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x3c000000, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:53:48 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400) 14:53:48 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x0) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:53:48 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r4, 0x4, 0x2400) fcntl$setstatus(r4, 0x4, 0x0) r5 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x80000000, 0x40000) fcntl$dupfd(r4, 0x406, r5) fcntl$setstatus(r3, 0x4, 0x2400) fcntl$setstatus(r3, 0x4, 0x0) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000040), &(0x7f0000000080)={'U+', 0x2}, 0x16, 0x3) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:53:48 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000000)={0x16, 0x1, &(0x7f0000000100)='G'}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$vcsn(&(0x7f0000001280), 0x0, 0x8000) ioctl$TIOCSRS485(r2, 0x542f, &(0x7f00000012c0)={0x9, 0x2, 0x1}) fcntl$setstatus(r1, 0x4, 0x2400) fcntl$getown(r1, 0x9) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000000)={0xa, 0x4e23, 0x3, @remote, 0xfffffff7}, 0x1c, &(0x7f0000001200)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9891fcb8c918143d28eb067e78c3c0bb7d29f38513fd58b4455010acdaf93b8504bb", 0x22}, {&(0x7f0000001080)="502e557fd8c2a7452a2f0344e5345f8a394d61b2cca29c6b2581f3683059867e0114d98a734218a6787953ae2cd8acb29165eb0c3d34f35abcd1d7f7e96319f9591d6fc538be03841966bde5188ce4d44a8a0de3ee9112ffecd386a955fe47f2cfdb8666aadd7d7fb3cc2f600ab75e5b5ca496f3b35afb9b4afff0b9ee5aedf8eaceff917a845d398f1c51f93bd3548e5e7d0cc0be1adadcf4c41d7423a79900423fc3aab8cf3f3f62b90f9bb060f4870e4f5ef5b60ecd2a34cf9ad5e9d44ae0", 0xc0}, {&(0x7f0000001140)="fd11ef1446c238d3eb01007c52749e8ec0c581952d49d60fcb33e4e3bfdd2b1011dcdbf4ed81198483f95fb1e376032cfea5c238ae9a2dbcf64744f9d82094ce365c9196c1c43b2058cf95b196ec62bd6fc3893b20587e79be3819d0d80b945576d610c361047e0a7c5285b7fd0a7a0e8bff644bec268a34ecb3d05c1374e17547c4dec95fadf0c5a270472e43e4268f9da3a39bb5b98796432b38", 0x9b}], 0x4}, 0x4000000) 14:53:48 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1ec8, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x3}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:54:04 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x0) 14:54:04 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x0) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:54:04 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x3f000000, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:54:04 executing program 0: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000300", @ANYRES32=r3, @ANYBLOB="08001d00", @ANYRES32, @ANYBLOB="6d6ed3af"], 0x24}}, 0x0) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, 0x0, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20048000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x9}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r5, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r5, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r6 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r9 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r9, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}, @devid=r10}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) 14:54:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r1, 0x4, 0x2400) fcntl$setstatus(r1, 0x4, 0x0) dup3(r0, r1, 0x80000) fcntl$getown(r0, 0x9) 14:54:04 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000300)={0x0, 0x400000, 0x1, 0x3, 0x348}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000040)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) io_uring_enter(r0, 0xa51, 0x4c95, 0x3, &(0x7f0000000100)={[0x6]}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:54:04 executing program 4: fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000040)='\x00', &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:54:04 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x40) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000140)=ANY=[@ANYBLOB="df802735485e0b142f0a5da3a408c6852b876d33c11ce2a55b9a0dfd8f35afe1d27e3c8d42e72d9ad4bdaa24057f7c59e4623a195cd3ab6efee7b2418c75d0dfbe3330a6198a5156a8136bf049e821ca0eb05ac29729d133b0a3ef7d0d1496a22a42edb356fa4952a593119dba73ad6368d427d503895193f1a3cf5237fb5a0245eacacef069ef775147cb71509cf0f81df615b9852ee85465bc9628c703e8cbd4c565f2ad0563db13918608e79fb312d2a42ba11afde21a6bcaa243"]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:54:04 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x0) 14:54:04 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000002c0)={"919d9531585654be30e440b66015c228", 0x0, 0x0, {0x70f3, 0x790c077b}, {0x2, 0x80000000}, 0xdf7, [0x0, 0xb7a, 0xe3, 0x4, 0xffffffffffffffc1, 0xfffffffffffffff9, 0x1, 0x9, 0x7, 0x2, 0x7ff, 0xfffffffffffffffe, 0x0, 0x7, 0x1f, 0x8]}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000006c0)={{r1}, r3, 0x8, @inherit={0x58, &(0x7f0000000040)={0x1, 0x2, 0x5, 0x1, {0xa, 0x8, 0x10000, 0x6, 0x1}, [0x3ff, 0xfffffffffffffffc]}}, @subvolid=0x3ff}) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:54:04 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r1, 0x4, 0x2400) fcntl$setstatus(r1, 0x4, 0x0) dup3(r0, r1, 0x80000) fcntl$getown(r0, 0x9) 14:54:04 executing program 4: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r2, 0x4, 0x2400) fcntl$setstatus(r2, 0x4, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, r0, 0x2) r5 = accept4$inet6(r1, 0x0, &(0x7f0000000040), 0x80c00) ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f0000000140)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:54:04 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x40000000, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:54:04 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x0) 14:54:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0xa, 0xc, 0x85, &(0x7f0000000000)="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"}) fcntl$setstatus(r0, 0x4, 0x45c00) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r1, 0x4, 0x2400) fcntl$setstatus(r1, 0x4, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r2, 0x4, 0x2400) fcntl$setstatus(r2, 0x4, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r3, 0x4, 0x2400) fcntl$setstatus(r3, 0x4, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f00000004c0)=@report={0x254, 0x20, 0x8, 0x70bd2a, 0x25dfdbfc, {0x6c, {@in6=@local, @in=@loopback, 0x4e20, 0xb95f, 0x4e22, 0x0, 0x2, 0x10, 0x20, 0x2b, 0x0, r5}}, [@lastused={0xc, 0xf, 0x2}, @extra_flags={0x8, 0x18, 0x6}, @replay_esn_val={0x30, 0x17, {0x5, 0x70bd2c, 0x70bd28, 0x70bd26, 0x70bd26, 0x5, [0xfff, 0x4, 0x8000, 0x57, 0x7f]}}, @tmpl={0x184, 0x5, [{{@in=@private=0xa010101, 0x4d4, 0xff}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x11}, 0x0, 0x1, 0x2, 0x8, 0x40, 0x800, 0x10001}, {{@in6=@private1, 0x4d4, 0x6c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x21}, 0x3507, 0x2, 0x3, 0x4, 0x4, 0xffff, 0x7fffffff}, {{@in=@dev={0xac, 0x14, 0x14, 0x30}, 0x4d4, 0x6c}, 0x2, @in6=@mcast2, 0x3503, 0x4, 0x2, 0x1, 0xee, 0x200, 0x3}, {{@in=@multicast1, 0x4d4, 0x3c}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1, 0x3, 0x1, 0x3f, 0x1, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x4d6, 0x2b}, 0x2, @in6=@mcast1, 0x3506, 0x0, 0x1, 0x8, 0x10, 0x1be, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0x6c}, 0xa, @in=@multicast1, 0x0, 0x3, 0x1, 0x20, 0x31d0, 0xc0000000, 0x1}]}, @replay_val={0x10, 0xa, {0x70bd2a, 0x70bd2d, 0x40}}, @lifetime_val={0x24, 0x9, {0x7f, 0x2, 0x1, 0x6}}, @mark={0xc, 0x15, {0x35075b, 0x3ff}}]}, 0x254}, 0x1, 0x0, 0x0, 0x480}, 0x20004000) fcntl$setstatus(r4, 0x4, 0x2400) fcntl$setstatus(r4, 0x4, 0x0) fcntl$getown(r4, 0x9) 14:54:04 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:54:04 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x800, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x100000}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r5 = inotify_init1(0x0) r6 = fcntl$dupfd(r1, 0x406, r0) ioctl$BTRFS_IOC_RM_DEV(r5, 0x5000940b, &(0x7f0000001e00)={{r6}, "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"}) r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$FITRIM(r8, 0xc020662a, &(0x7f0000000080)={0x13e, 0xfff7fffffffffff7}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r8, 0xc018937d, 0x0) ioctl$RNDCLEARPOOL(r8, 0x5206, &(0x7f0000000040)=0x200) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r7, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r9}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) 14:54:04 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r1, 0x4, 0x2400) fcntl$setstatus(r1, 0x4, 0x0) dup3(r0, r1, 0x80000) fcntl$getown(r0, 0x9) 14:54:04 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:54:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000010000001800000088c08f36e1a4382872c8d0b6473620c4250f86b129a1598ca6e966df2d59b40a9045d292de6d1eee4d6f7c5c0f0d2c6946762214a43c3d6809d46e333b4367c86fe50870135433df9d497d62a83101c83804753df50d4b4ed378b5faf0009e557664f2706a0a1ffc13da4c5b216dc48cc7b7d5c389661a6e5dbc23cdb2aefff5a5a4b883359bc990f199d82325699208e157523674e18d3f92b998435bf60f37c1fbedbc7ced307196039645480b7e40731f287c9c3bee2d16031d55bfffa0ac658711a6ebd17c3492", @ANYRES32=0xffffffffffffffff, @ANYBLOB="06000000000000002e2f66696c653000"]) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x2) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) fcntl$getown(r0, 0x9) 14:54:04 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x30, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x28000000}, 0x10) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r6}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) 14:54:04 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x42000000, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:54:04 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r1, 0x4, 0x2400) fcntl$setstatus(r1, 0x4, 0x0) dup3(r0, r1, 0x80000) fcntl$getown(r0, 0x9) 14:54:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[r0, r0], 0x2) fcntl$getown(r0, 0x9) 14:54:19 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:54:19 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1, r5}}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r6, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r7}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) 14:54:19 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x30, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x28000000}, 0x10) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r6}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) 14:54:19 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:54:19 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x4ea00fff, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:54:19 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r1, 0x4, 0x2400) fcntl$setstatus(r1, 0x4, 0x0) dup3(r0, r1, 0x80000) 14:54:19 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x4c000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$FITRIM(r1, 0xc020662a, &(0x7f0000000080)={0x0, 0xfff7fffffffffff7}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, 0x0) ioctl$CDROMPLAYBLK(r1, 0x5317, &(0x7f0000000000)={0x9, 0x6}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200040, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r3, 0x4, 0x2400) fcntl$setstatus(r3, 0x4, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x4}}, './file1\x00'}) fcntl$getown(r0, 0x9) 14:54:19 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open_tree(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x9100) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x204, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r2, 0x0) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x5, 0xc0, 0x81, 0x80, 0x0, 0x4, 0x10400, 0x6, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f0000000280), 0xa}, 0x4000, 0x0, 0x7, 0x5, 0x7fffffff, 0x0, 0x7, 0x0, 0x6, 0x0, 0xd7c}, 0x0, 0xc, r2, 0x1) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x4, 0x2, 0x68, 0x3f, 0x0, 0x2, 0x10, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x6, @perf_bp={&(0x7f0000000040), 0xc}, 0x20, 0x8001, 0xff, 0x6, 0x7a5000000, 0x66, 0x8, 0x0, 0x7f, 0x0, 0x7f}, 0x0, 0x9, r1, 0x9) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r3, 0x4, 0x2400) fcntl$setstatus(r3, 0x4, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r4, 0x4, 0x2400) fcntl$setstatus(r4, 0x4, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f00000006c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:54:19 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r1, 0x4, 0x2400) dup3(r0, r1, 0x80000) 14:54:19 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x4ebfffff, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:54:19 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x9) 14:54:19 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$incfs(r3, &(0x7f0000000180)='.log\x00', 0x400000, 0x20) pwrite64(r3, &(0x7f00000000c0)="04", 0x1, 0x3ff03) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="24000000af8e688a1509883fb5d7f826f067d58260314d37d8fbf6ab5da48db3e9608cf228ed1e4ffa98fb4ed26573d823e6def0af08c7c3f00103273bc5b7553cea968dbc632bddd32c5852f69f4e1cbeac449be7754eb8a323bd2a9d5aac19d2fc39b0eb224cd3841821a32f06d2d14164022de885eb6f2d8ef8d701938c803842b1313d749be7b4387f5e24aae32f2ac8224d7f1823ec1d30db6cc1fc97", @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="0800050002ec9f00"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000610693a3d2e88afb4d525081f3657e8ce4c7e49edcd5d1632f7ffb9cec99c04d0a2086e8b3b6290eb38914e2dfa517f2dfc229c89490bcd0431f4fc1f039d34a9688cda36a73685ac935be39f12b71c04965ff032811bbe8d8ae4b7f4d80057db3c7bf75ea2086370cf924725556a3d395fc3602b40f67d55d4c8aa6b1f8ffcd6cd198fc", @ANYRES16=r2, @ANYBLOB="050000000000000000103100000001012100", @ANYRES32=r4, @ANYBLOB="20002a00dd066162636465666512505050505050ffffffffffff080211000001"], 0x3c}}, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0xac, r2, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x68}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x10}, @NL80211_ATTR_IE={0x64, 0x2a, [@gcr_ga={0xbd, 0x6}, @supported_rates, @measure_req={0x26, 0x54, {0x3f, 0xff, 0xff, "634ccc03087ec8f5c5ec913cf492b5262a56960790a13771173a9703408daabf84a108124ce0012b02d72839f4d469ffc30013ae9dcc5ace13189665613bc4afcb5c4b10aeebbeefcde35a608103cf3af1"}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2d}]}, 0xac}, 0x1, 0x0, 0x0, 0x2}, 0x4000) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r6 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:54:19 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) syz_io_uring_submit(0x0, r0, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x400) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) tee(r5, r2, 0x80000001, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:54:19 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup3(r0, r1, 0x80000) 14:54:19 executing program 7: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = fork() r3 = open_tree(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x9100) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x204, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x3f, 0x20, 0x8e, 0x0, 0x0, 0x100000000, 0x1022, 0x12, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x9, 0x1}, 0x40800, 0x6, 0x80000001, 0x3, 0x6e, 0x9, 0x4, 0x0, 0x4, 0x0, 0x4}, r2, 0x9, 0xffffffffffffffff, 0xd) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000006c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) syz_io_uring_complete(r4) 14:54:19 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) pread64(0xffffffffffffffff, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r4}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) 14:54:19 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x4ee00fff, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:54:19 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x9) 14:54:42 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:54:42 executing program 7: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0xda915e8d4e81d81a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:54:42 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:54:42 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) dup3(r0, 0xffffffffffffffff, 0x80000) 14:54:42 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$FITRIM(r0, 0xc020662a, &(0x7f0000000080)={0xffffffffffffffff, 0x3, 0x3}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) fcntl$setstatus(r3, 0x4, 0x2400) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000000)={0x2, 0xffffffff, 0x8, 0x80000003, 0x7, 0xb7}) fcntl$getown(r3, 0x9) 14:54:42 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:54:42 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x4ef20fff, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:54:42 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x9) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000005eb40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005fb40)={0x401, [{}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}], 0x1, "4cb878f1e99b05"}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000000)={r2, 0x100000000}) 14:54:42 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) dup3(r0, 0xffffffffffffffff, 0x80000) 14:54:57 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:54:57 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r7}) syz_io_uring_submit(r3, r0, &(0x7f0000000880)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r1, 0x0, &(0x7f0000000840)={&(0x7f0000000300)=@can, 0x80, &(0x7f00000007c0)=[{&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000380)=""/232, 0xe8}, {&(0x7f0000000500)=""/22, 0x16}, {&(0x7f0000000540)=""/212, 0xd4}, {&(0x7f0000000640)=""/164, 0xa4}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000000700)=""/137, 0x89}], 0x7, &(0x7f0000003e00)=""/213, 0xd5}, 0x0, 0x0, 0x1, {0x2}}, 0xea) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) 14:54:57 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101040, 0x99) pread64(r0, &(0x7f0000000380)=""/87, 0x57, 0x8) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$FITRIM(r3, 0xc020662a, &(0x7f0000000080)={0x0, 0xfff7fffffffffff7}) sendfile(0xffffffffffffffff, r2, &(0x7f0000000340)=0x1, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x80, 0x6, 0x4, 0x6, 0x0, 0x7f, 0x924, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xd681, 0x4, @perf_bp={&(0x7f0000000040)}, 0x8000, 0x5, 0x6, 0x3, 0x3f, 0x3157, 0x6, 0x0, 0x9, 0x0, 0xb4a}, 0xffffffffffffffff, 0xf, r3, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="280000001a00210c00000000000000000a00000008000000", @ANYRES32, @ANYBLOB="97ef0dbf9b1e71d0d9f1e19a5e6500168008008957c1fb4c2577af51f5fa84543d5eeecd7e9da5418d885fdc72fb612622e1ac8fd8e18e86a056d39efe8a03ced6f5462ee82389e20b2f6305a8f061cc048738b8b375a293f614ef48dda97e98a69c9f00c410a920c55f5c", @ANYRES32, @ANYBLOB="8d5741198be7da135fb5c03286f572743d"], 0x28}}, 0x0) ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f0000000300)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:54:57 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000080)) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000500)=ANY=[@ANYBLOB="ecff39c97e5acf86af0c0c9627e57a022331b1b591d84be2fda1f048a63cb3120e488e41398de803140565accd3bb99cf20881652d1f8c81a2742dce4a5d524f6024322914a2b3801f0d66ece0a0cc07503bd50000000000000000c19596c96624368f3d5a0837e27b0f9e378c75c5aa25d0f74288c29ef02e10226e86f5566437d7ea46bbb19c63dded2c96433ae387a762d32546b323d7a714208212071bce817ccbaa920836698b032eb0eee2fd3b3c6ea89d2e853196d64ef4add4a0ba9ff10370e3d5f1c3b9c681e01e1c71ac0d17196dc9"]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:54:57 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x9) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x4, 0x1}]}) 14:54:57 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0xa5010000, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:54:57 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) dup3(r0, 0xffffffffffffffff, 0x80000) 14:54:57 executing program 4: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, &(0x7f0000000100)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2e2f66696c65be92373000"]) io_uring_enter(r2, 0x58e5, 0xefb8, 0x3, &(0x7f0000000140)={[0x2]}, 0x8) syz_io_uring_setup(0x78f, &(0x7f00000002c0)={0x0, 0x385b, 0x1, 0x0, 0xfffffffd, 0x0, r1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) [ 1965.751313] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 14:54:57 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) (fail_nth: 1) 14:54:57 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'tunl0\x00'}) 14:54:57 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup3(r0, r1, 0x80000) [ 1965.858288] FAULT_INJECTION: forcing a failure. [ 1965.858288] name failslab, interval 1, probability 0, space 0, times 0 [ 1965.859983] CPU: 1 PID: 12340 Comm: syz-executor.3 Not tainted 5.10.229 #1 [ 1965.860828] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1965.861863] Call Trace: [ 1965.862193] dump_stack+0x107/0x167 [ 1965.862636] should_fail.cold+0x5/0xa [ 1965.863108] ? fasync_helper+0x3b/0xb0 [ 1965.863584] should_failslab+0x5/0x20 [ 1965.864050] kmem_cache_alloc+0x5b/0x310 [ 1965.864545] ? lock_acquire+0x197/0x470 [ 1965.865030] fasync_helper+0x3b/0xb0 [ 1965.865484] tty_fasync+0x17b/0x390 [ 1965.865944] ? tty_poll+0x1c0/0x1c0 [ 1965.866385] do_fcntl+0x3e6/0x11a0 [ 1965.866818] ? f_getown+0x2e0/0x2e0 [ 1965.867269] ? selinux_file_fcntl+0x93/0x180 [ 1965.867809] __x64_sys_fcntl+0x169/0x1e0 [ 1965.868305] do_syscall_64+0x33/0x40 [ 1965.868758] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1965.869378] RIP: 0033:0x7f84c2fdab19 [ 1965.869845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1965.872080] RSP: 002b:00007f84c0550188 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 1965.873004] RAX: ffffffffffffffda RBX: 00007f84c30edf60 RCX: 00007f84c2fdab19 [ 1965.873881] RDX: 0000000000002400 RSI: 0000000000000004 RDI: 0000000000000004 [ 1965.874748] RBP: 00007f84c05501d0 R08: 0000000000000000 R09: 0000000000000000 [ 1965.875615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1965.876480] R13: 00007ffec35506cf R14: 00007f84c0550300 R15: 0000000000022000 14:54:57 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0xaa1f0000, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:54:57 executing program 4: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000440)='(\':*[\xf6\x00') r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') r3 = io_uring_setup(0x78d3, &(0x7f0000000140)={0x0, 0xec2, 0x1, 0x3, 0x56, 0x0, r1}) syz_io_uring_setup(0x67f6, &(0x7f00000002c0)={0x0, 0x5dee, 0x2, 0x3, 0x397, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000340)) pread64(r2, &(0x7f0000000240)=""/83, 0x53, 0x200000048) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r6) recvfrom(r2, &(0x7f0000000380)=""/59, 0x3b, 0x12000, &(0x7f00000003c0)=@l2tp6={0xa, 0x0, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x80) 14:54:57 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/2, 0x2}, {&(0x7f0000000140)=""/174, 0xae}], 0x2, 0x401, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:54:57 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) fcntl$setstatus(r0, 0x4, 0x2400) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="7c000000030801020000000000000000030000054c00048008000140000000010800014000007fff08000119574581c920036b386440000000040800014000000001080001400000000908000140000000b601000140000000090800014000008001080001400000010114000480080001400000000208000240000000080500030088000000"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x4810) fcntl$getown(r0, 0x9) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000340)=0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fcntl$getown(r1, 0x9) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000300)) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x3, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8002) 14:54:57 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup3(r0, r1, 0x80000) 14:55:13 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) (fail_nth: 2) [ 1981.570926] FAULT_INJECTION: forcing a failure. [ 1981.570926] name failslab, interval 1, probability 0, space 0, times 0 [ 1981.572315] CPU: 1 PID: 12466 Comm: syz-executor.3 Not tainted 5.10.229 #1 [ 1981.573152] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1981.574153] Call Trace: [ 1981.574679] dump_stack+0x107/0x167 [ 1981.575125] should_fail.cold+0x5/0xa [ 1981.575592] ? create_object.isra.0+0x3a/0xa20 [ 1981.576150] should_failslab+0x5/0x20 [ 1981.576613] kmem_cache_alloc+0x5b/0x310 [ 1981.577108] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1981.577746] create_object.isra.0+0x3a/0xa20 [ 1981.578278] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1981.578930] kmem_cache_alloc+0x159/0x310 [ 1981.579440] fasync_helper+0x3b/0xb0 [ 1981.579895] tty_fasync+0x17b/0x390 [ 1981.580337] ? tty_poll+0x1c0/0x1c0 [ 1981.580778] do_fcntl+0x3e6/0x11a0 [ 1981.581210] ? f_getown+0x2e0/0x2e0 [ 1981.581659] ? selinux_file_fcntl+0x93/0x180 [ 1981.582199] __x64_sys_fcntl+0x169/0x1e0 [ 1981.582712] do_syscall_64+0x33/0x40 [ 1981.583166] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1981.583790] RIP: 0033:0x7f84c2fdab19 [ 1981.584248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1981.586500] RSP: 002b:00007f84c0550188 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 1981.587428] RAX: ffffffffffffffda RBX: 00007f84c30edf60 RCX: 00007f84c2fdab19 [ 1981.588297] RDX: 0000000000002400 RSI: 0000000000000004 RDI: 0000000000000004 [ 1981.589165] RBP: 00007f84c05501d0 R08: 0000000000000000 R09: 0000000000000000 [ 1981.590033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1981.590918] R13: 00007ffec35506cf R14: 00007f84c0550300 R15: 0000000000022000 14:55:13 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="f8ec17c256ae988cd55ae8886c6ee0cc240a62f8"]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4000) ioctl$RTC_PIE_OFF(r4, 0x7006) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r6}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:55:13 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x41}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000140)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r2, &(0x7f00000002c0)="8fadd404f89bae11d3f5e39387bd0a27d655d70e46367e4667b0688fec62710612bfca89c48327a4608f3626ee07c09862eedae5f0ce81f26291a0d7f7d39967520e4558355c01d681c59b980bbcb8e11173012426a3203efa02b5754a0b3d7e8e5c2b44af5308f4ea00aa1211ebfaf602f2d13676ebc51594d20d4df389b92431d748b9", 0x84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000040)={0x1c3124d7bcb09a2e, 0x7, 0x1000, &(0x7f0000000500)=""/4096}) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:55:13 executing program 7: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) write$eventfd(r1, &(0x7f00000000c0)=0x400, 0x8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7ff}}, './file0\x00'}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$FITRIM(r5, 0xc020662a, &(0x7f0000000080)={0x0, 0xfff7fffffffffff7}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) 14:55:13 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="0000000000000000472f6669d35b3000ad6c0e63a9eca3fcc7f28a8da4de1dbb607f0a80b3b8ffd51f26abe5670695827a2d4bb4791de4330692eba90f83088ea573465dcd67e5632b07d641209cd010a1058ad7d43be8e43597ee9ca837810185a4b487b882e81b40994b368ed07c8970a18522ce04832d5b04a4f0520cb9577b4b40747c7db97c9298d0b98761c2b584c559b2e788e890fa"]) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r2) lseek(0xffffffffffffffff, 0x1, 0x2) fcntl$setstatus(r2, 0x4, 0x2400) fcntl$setstatus(r2, 0x4, 0x0) r3 = syz_io_uring_setup(0x3e61, &(0x7f0000000140)={0x0, 0x10e6, 0x10, 0x3, 0x2ef, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) fcntl$getown(r3, 0x9) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000040)={0xfffa, 0xf801, 0x2}) 14:55:13 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:55:13 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0xdd010000, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:55:13 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup3(r0, r1, 0x80000) 14:55:13 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup3(0xffffffffffffffff, r0, 0x80000) 14:55:13 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x5, 0x9, 0x10000}) fcntl$getown(r0, 0x9) 14:55:13 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0xde010000, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) [ 1981.707873] audit: type=1400 audit(1731250513.264:14): avc: denied { execute } for pid=12467 comm="syz-executor.0" path="pipe:[36609]" dev="pipefs" ino=36609 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1 14:55:13 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) (fail_nth: 3) 14:55:13 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x2, 0x1f, 0x7f, 0x1, 0x0, 0x1, 0x301, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x81, 0x2, @perf_bp={&(0x7f0000000040), 0xc}, 0x56186, 0xbedb, 0x80000001, 0x0, 0xb9c4, 0x9, 0x629, 0x0, 0x9, 0x0, 0x1f}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$FITRIM(r1, 0xc020662a, &(0x7f0000000080)={0x0, 0xfff7fffffffffff7}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x40010, r1, 0x8000000) r2 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) io_uring_enter(r1, 0x3f67, 0x7274, 0x1, &(0x7f00000000c0)={[0xd8c1]}, 0x8) openat(r0, &(0x7f00000001c0)='./file1\x00', 0x12000, 0x103) 14:55:13 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) r4 = syz_io_uring_setup(0xd1a, &(0x7f0000000140)={0x0, 0x4af0, 0x2, 0x0, 0xcb, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000002c0)) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000000500)={0x0, 0x8, 0x0, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) [ 1981.790317] FAULT_INJECTION: forcing a failure. [ 1981.790317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1981.791873] CPU: 0 PID: 12604 Comm: syz-executor.3 Not tainted 5.10.229 #1 [ 1981.792710] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1981.793716] Call Trace: [ 1981.794045] dump_stack+0x107/0x167 [ 1981.794521] should_fail.cold+0x5/0xa [ 1981.794992] _copy_to_user+0x2e/0x180 [ 1981.795461] simple_read_from_buffer+0xcc/0x160 [ 1981.796033] proc_fail_nth_read+0x198/0x230 [ 1981.796566] ? proc_sessionid_read+0x230/0x230 [ 1981.797121] ? security_file_permission+0xb1/0xe0 [ 1981.797712] ? proc_sessionid_read+0x230/0x230 [ 1981.798268] vfs_read+0x228/0x620 [ 1981.798710] ksys_read+0x12d/0x260 [ 1981.799142] ? vfs_write+0xb10/0xb10 [ 1981.799600] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1981.800240] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1981.800869] do_syscall_64+0x33/0x40 [ 1981.801324] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1981.801949] RIP: 0033:0x7f84c2f8d69c [ 1981.802418] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1981.804669] RSP: 002b:00007f84c0550170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1981.805598] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f84c2f8d69c [ 1981.806490] RDX: 000000000000000f RSI: 00007f84c05501e0 RDI: 0000000000000005 [ 1981.807359] RBP: 00007f84c05501d0 R08: 0000000000000000 R09: 0000000000000000 [ 1981.808228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1981.809097] R13: 00007ffec35506cf R14: 00007f84c0550300 R15: 0000000000022000 14:55:28 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup3(0xffffffffffffffff, r0, 0x80000) 14:55:28 executing program 4: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x828010, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_none}, {@cache_mmap}, {@version_u}, {@uname={'uname', 0x3d, '\x00'}}], [{@appraise}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}}) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) syz_io_uring_setup(0x4d50, &(0x7f0000000240)={0x0, 0x3ab2, 0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) io_uring_enter(0xffffffffffffffff, 0x44ca, 0xfb39, 0x2, &(0x7f0000000040)={[0x100]}, 0x8) 14:55:28 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) 14:55:28 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r5}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r6, 0x4, 0x2400) fcntl$setstatus(r6, 0x4, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r6, 0x941c, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001a00210c00000000000000000a00000008000000", @ANYRES32, @ANYBLOB="0c001d8008000000", @ANYRES32, @ANYBLOB="fa08eac0c084225b069b6e8989ff83017afb6a79acc2334bf86ce9f2821a6efe54fd32a66e3c77adb2f6f47ce3aa934c2a5430a434cb77ef980c81d59fc894e38c44c590e1803cbb0c0ddd3188008dd5af1a0584ccda140afd8e8416a2f6a28f698515f89c3b2fbc1763bd3f3a5052844ff01a22122cb8868517060f6eba0708b5724c8ef83b72c495a33d1947b3820e283b050ad8e169d534232bc04b851f2aabbdd2fa60f94c78faab6e352fe951c0eac5932592de1fd7f5d02da286b30483d289e843"], 0x28}}, 0x0) ioctl$sock_SIOCINQ(r7, 0x541b, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:55:28 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x9) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000000)) 14:55:28 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0xe0010000, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:55:28 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:55:28 executing program 7: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000340)=ANY=[@ANYBLOB="1b20d35483e001012d4279bbb96007d3a66bd5eb970492cf1e7e15231c12d7e7a8209316b7aa6846bedca93e4bc26bcf78d78cf6cc0cf27d08cf7d448c1965afe45d90dbdf02df32ac831b7a1e7dde72977540791eb66bccde516ac473492eaec7b46ea6f7"]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000002100)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x30000000000) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = inotify_init() ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"53abc6abff7d009d200000008cb32614", 0x0, 0x0, {0x200, 0x400}, {0xffffffff, 0x8}, 0x0, [0x4, 0x1009, 0x1, 0x8000, 0xf3a, 0x0, 0x0, 0x7fffffff, 0x3, 0x68, 0xf42, 0x8, 0x100, 0x1a1d0a1d, 0x0, 0x7]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001580)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x80489439, &(0x7f0000001980)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) fcntl$dupfd(r7, 0x0, r3) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000000580)={{r4}, r5, 0x12, @unused=[0x8000, 0x0, 0x6, 0x8e], @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000006c0)={r6, 0x40, 0xffffffff}) 14:55:28 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup3(0xffffffffffffffff, r0, 0x80000) [ 1996.973078] netlink: 'syz-executor.0': attribute type 29 has an invalid length. 14:55:28 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x2, 0x2400) 14:55:28 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x6, 0xff, 0x77, 0x4, 0x0, 0x3, 0x40021, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7290, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x801, 0x8, 0x81, 0x9, 0x3f, 0x20, 0x401, 0x0, 0x4, 0x0, 0x1000}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x8) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:55:28 executing program 4: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r2, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r3 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000f, 0x11, 0xffffffffffffffff, 0x0) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, 0x0) r6 = fork() r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000004, 0x12, r3, 0x8000000) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x100000c, 0x20010, r1, 0x10000000) r9 = openat(0xffffffffffffffff, 0x0, 0x2d3242, 0x84) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd, 0x1, {}, 0xd68, 0x0, 0x0, {0x0, r10, r9}}, 0x1) syz_io_uring_submit(r7, r8, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r2, &(0x7f00000002c0), 0x0, 0x0, 0x80800, 0x0, {0x0, r10}}, 0x10001) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x7, 0x40, 0x56, 0x5, 0x0, 0xfffffffffffffffd, 0x0, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000040), 0x8}, 0x38301, 0x80000000, 0x1974, 0x5, 0x80000001, 0x88, 0x1, 0x0, 0x5, 0x0, 0x5}, r6, 0x4, r0, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:55:28 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0xe4ffffff, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:55:28 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x28, 0x1a, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0xc, 0x1d, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xffffffffffffffff}]}]}, 0x28}}, 0x0) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="740000000d06010100000000000000000100000511000300686173683a6e65742c6e657400000000050005000c000000050001000700000014000320686173683a69702c706f72742c69700005000100070000000e0003006269746d61703a6970f0e205dc7790a26200"/116], 0x74}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @local}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000100)={@rand_addr, @local, 0x0}, &(0x7f0000000480)=0xc) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0xd0, r3, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x7}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xffffffe0}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x81}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xffffff7f}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x2}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7ff}, @ETHTOOL_A_CHANNELS_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x24004000}, 0x40881) 14:55:28 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup3(r0, r1, 0x80000) 14:55:28 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x3, 0x2400) [ 1997.072033] netlink: 'syz-executor.5': attribute type 29 has an invalid length. [ 1997.073260] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=12721 comm=syz-executor.5 [ 1997.083158] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 1997.085403] netlink: 'syz-executor.5': attribute type 29 has an invalid length. [ 1997.088743] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=12721 comm=syz-executor.5 14:55:28 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup3(r0, r1, 0x80000) 14:55:28 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000030000f30000e1040500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff2100050001000000002500000000208fcae13c8ad060bdcbaae684013a4f2e8970c85e8dcc9d599b7560715af0d1d0521ce35cfb739eadeb025575a6f59c924e55e497dfb22c63454494f491022c098b003c9c0b732b3a196c3aeba9a10a2bba31a6426ebe68e3"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:55:43 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000040)=ANY=[@ANYBLOB="1efc9b00000000000000007893196160a2f150773891f3d535241860d0c8b205876d293aa9096ca088d09059bf5be8ae9724c34f6354ad4098b210b8c31548d7839ef840a8cc4f0b644d2a8aa2a25d688f"]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) fsopen(&(0x7f00000000c0)='exfat\x00', 0x1) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:55:43 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$FITRIM(r1, 0xc020662a, &(0x7f0000000080)={0x0, 0xfff7fffffffffff7}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @broadcast}}, 0x0, 0x0, 0x3a, 0x0, "418cce2b711b67bad2cb32cc5e786d06ca1665e7e328f879ecdf760329a27b411bb477a776dc417e4685b274a2bf1e0abc09a0676fd5e74bb08f79f30c1391d54029936ba79d34e871e7cd834964112d"}, 0xd8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r3}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) 14:55:43 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x1000000, 0x40010, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:55:43 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x5, 0x2400) 14:55:43 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:55:43 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_pts(r0, 0x4c0000) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000000)={0x5, 0x4, 0x0, 0x6, 0x6773}) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x9) 14:55:43 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup3(r0, r1, 0x80000) 14:55:43 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0xee010000, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:55:43 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup3(r0, r1, 0x80000) 14:55:43 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x6, 0x2400) 14:55:43 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x9) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) fdatasync(r1) 14:55:43 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0xff0fa04e, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:55:43 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r3, 0x4, 0x2400) fcntl$setstatus(r3, 0x4, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000000500)={{r2}, 0x0, 0x0, @unused=[0x3ff, 0x5, 0xd47c, 0x80000001], @devid}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$FITRIM(r4, 0xc020662a, &(0x7f0000000080)={0x0, 0xfff7fffffffffff7}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e24, 0x3f, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x95}, 0x1c) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:55:59 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup3(r0, r1, 0x80000) 14:55:59 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000)=0x1, 0x4) fcntl$getown(r0, 0x9) 14:55:59 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000040)=ANY=[@ANYBLOB="fcfca05e87eca7a2bc62f02990151200725cee8a41cb05b8cd2a9e4b990a8d6af69fc416267959b8485e8feb3e12aef98bf4ca61bb221c8775482ab33e779ca1f20fa27a29e9c46308da10fbf3229bb6e8f135d5f527f84dd3eef4615ffef727e4e1a58c065c3ca1249533d37b82d1d62f5bea0e102d3a5007b8a89c4fc64e3927471ef10d9161ac8500"/148]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000006c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:55:59 executing program 0: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0xff, 0x40, 0x62, 0x0, 0x0, 0x99ed, 0x8088, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x2, 0x8c}, 0x4000, 0x401, 0x40, 0x1, 0x1, 0xd3, 0x1ff, 0x0, 0x2, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r1, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r2, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r3 = syz_io_uring_setup(0x32a8, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r6, 0x4, 0x2400) fcntl$setstatus(r6, 0x4, 0x0) r7 = openat(0xffffffffffffffff, 0x0, 0x2d3242, 0x84) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000180)=@IORING_OP_TEE={0x21, 0x5, 0x0, @fd_index=0x5, 0x0, 0x0, 0x8, 0x8, 0x1, {0x0, r8}}, 0x6) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r9 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r9, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r10}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) 14:55:59 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x7, 0x2400) 14:55:59 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0xff0fe04e, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:55:59 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:55:59 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x8, 0x10000) syz_io_uring_setup(0x4d50, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$FITRIM(r4, 0xc020662a, &(0x7f0000000080)={0x0, 0xfff7fffffffffff7}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006580)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x6, &(0x7f0000006540)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x9}, 0x2a) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000700)={{}, r5, 0x4, @inherit={0x58, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000000200000000000000ff0100000000000040000000000000002a00000000000000040000000000000001800000006f00000000000000000000800000000000000000000000010000000200000000000000"]}, @devid}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000500)={{r0}, r5, 0x1a, @inherit={0x78, &(0x7f0000000140)={0x1, 0x6, 0x907, 0x6, {0x0, 0x7, 0x1f800000, 0x8, 0x3}, [0xffff, 0x7fff, 0x2, 0xffffffff, 0xd42, 0x2]}}, @name="e27334649124d8a84d5b2704951cb8d6b7fccec27824d7098689e843d28f2bf49358a0f5a2aa17cae80c0fc421614ef5f05dc1e56f05205c70bef62f9653ddcac74e1bf891ccb06b4c4848cd5a8963f8fbaa315f2cc627cbb0b9ee9ec666d950fe42cebeebdb1ed87a88c56a460a1f904f3d3dd9371bd33dfa96e991dc33516a1669744122d5e020e27f441d0342a579e0ce729c85b89d6c6561ac5d154a9235e94468c84f59efc6b5fa7f50f5b9b57bb3f002f754fe16a810877d681179cfd9f133c8ddc251fc7048ebb928e6d31226997e80e0accb8568785230814609f2182ae281d758b6d37086674658b71251d51460e1360c89431479dc7c3f65d95cbdb186e00e09d0f9ef8e5a809f1fc1e7c64a3cbf2d14162c97d16feec8d8d65a0d150ab178e6ad716a38a62bfaaec794819fdd59f6c090486dc53ae56f5d8a9091312c4dfe452bad36e7abda088e51dd60fe6cb0cb89851b6a1eeec9ec783e49fb90efc560c5a0c8e4f15bdbdfd39e644d4aa8fdac97d81e4f48fd6f7646e696299e502f4332368d260b6f95310ee4ab6e463e686833ed8ad29a15efff7cdf5436ac1cc11b10e408abdfbfa8a2660bc2d83ce0f2f536df17f9e28345eea26a8b8114f7562296d1db08eb83f7b2668c82fa9a6a7cac0ca30c6a76b233fc6b2d86cdd0e9ab9fd7c1f7df5a1d70c6e8ac10164cb58a171e1521d4795ef5a9dec07b068ad313490828aa3a897a720dfe88c46e8c020a09dd5164f2ec54d914b3def2d6616437b5db7553c12c8587c11edf9121e4d9f3ec9d2b7307078bf97cd2c68936e87d6071dea9d2ba8cbc890136781420b1b97b7e1c70bc260e7fd632c2a516c0d433d042f0612d69c546f35f09301401f75eb13e859da94e6eda9eae6ffe93f8a6eb9da057aea3065c57c290d794dc868660369e495393fee4019e2b84ebae72bc6137f935e459d61ae2e34989dfd850e1dd7ceee137afb865cd5d6f09405bc11b0a9fded055b89281a8ed8bf8c1fbdbbe51d18d3d690ed69ed415d3e6b7f798640fab9e82edc4eee9bad0363f10a7679b43853158742e5c40067b86117be1f95bb57dd9710ddbd7cef8afeb63933c2ff78cca68471ed1bac206e38387cd62b5a154dfcd5bd9c2acdea57cbfe8c6048b55e145e38160decb145d06cecb11f8bb0366b14ba3719bf96e4de3b08f239c9e96c9b36dfa21bd4c9709fbeedb9335c5a692c7854f16604a818f1ef5f3aa6b61fd9360e5581cf8ffd9b40fcb36633d2a0ba9d797ecf608e2f599d44c75048033d5ffe25d30a01c684141c7201a68260db3d45e7bcaf6897aa9be0a2c7c614caddf6d2dc07e514e78c5e4cf5b88d2db693fa63e418eaa1ca11440ac310d6e8da66a19b736b7efa40090f01e33728feb9a2ced9503c3ca8f1945330523b891253dd7cc78df8c0dc05e04d9ba4d15934753835d5e9616601f0d1ce9a9e191d3531dda4daab4b98907be5a13e75255ee1550274daf613a2327bc3eb9b9491009c8fd1f1d01ec706844385f11a2e7ec6f94d57400811ca4783f38e88423ef7adb2745718e7dcf61c445145864f7c2710a2a2671aa13bc95a55c46c70917f9779f01c2c7b19ba4d6b4084c9e5aa4d2d4e581ccc534493b5aabdd248561762eaac7842204fe9675c35ffd0f6def16a713ff3a68b03671c006035aa925ca43fe982f88d7c62e537bec861d98fa7ff0ccd2932220e1b0af1d22acba14beb843d88b9cd3d2c8f1e5c3df38f98b7bb2ef1b30a066339207b90ee55af600585381f6c84e1671fa628cdf5757c8741be45f890f6704e29f0ec6adc3e6e4da40e723432deee32831004b40cec51984da7a58b322ed956f28792c7b09711b8966479fe01450cad3a2f8dbecca48f9c590548d9f0107a22d0ccbbc84da34562df33048e1f893d62f18fa32d990d2d57f3f640a346a5cd483faef67eedd3d9c130d074f5b56ad3a22b33c135bdb665f1e4dab8d9ec7da55a217a77ef77e9861e7f21b1a8d99d870d6ae0b17ca9c3976f1828c2f413fa3838889b54a39e65f586c5d51a0a5cbaf9dd03264a36ce2c450f2b220b91e92cef42e698eb4a2914cd09f281975e4773df41fb44195083a1aac94c8cd837a3cc9c7df7c9f89d1bae71bef2450ff651fb0d43b337565eaaf01c3374220739c5eee5cc94659de56d6e1d171332511dceb5c14e44fcdcf45fe115fa9bf0f42ab16085723cf6f41daebeb672ec587ab6621af94ff89dfb0e36aae72ac7a857a116fffeaf6c137fc9fb75a613ff996774531274579f984aa48929a935b07ae7d5d743fe75a8d7690493ab0dff168e9469b08be7aafd0a5a32177e5fbf627f45aa5496bfe616f629d4d7e02239ed807f59da890d775bf1993ef5fc3d1c0f9940307fc2dade5d72f27bc43db725f76a57baa1c67e8f4160685abfe2b73b0d0551312b0f5d60e7b452139113f0b17fcc91a31be9391bce005338a579a996ffacdeb49caf809ba54fd7df0b3183f31f53efb2e41c0ebcbdd13154c31b8f788de3bf7136459188571a4366ced0aabe802851e0bcbe7c623f899d5cbddf37accf124f2e36f0e7cf594ffebf1f1b9261d6103e8cd48eada1f14b4332112e476e3e0b5a3db0687e3260643ee963d60afcafffb7b43608571e5594d1753f680cf7d23582087ac3509e588c0326e2f7775d3422af2aa4c5867185ad8b75e0e5335ba6cc19d68899e2ea229fc20ad92936e623dc6d46ef6143fa0594b4f689578c7b4f265a6f6a54bbde4417b9e6e24b6f0c5f14176fb9bd35dc6df0908b78e185bb2c381dae606f1eae3e37ef562e89b3f81b820b069bfeb178a4a8ea0fca0715e59c28968e20c1436a8645efcb223b8828b8a145a85223bceb7c56bc819292a0ac1bd257f3bd1c5497480284dfbab8a2454d97fe1c2c3012a4bea151018303dfc5d09bca4b0dac0152fb1ac3c6718ae93a3e567086920642d31372a07250c9d4defebe57d24970fc957bf9d86ee082dd49b33e01ac38cdbc2179c6c2d9d980198f1ea7297d931bc4fb73e38a4ed35c8f202a235340ce3c11a59b2580530808e2134e385d508b2a37b36889cb3a2497681fb421727be181d9db881d9df8b5b043fe8e8b8d7446de00a00d855ea07c3f7b7c14a6aaad71deac5b768ebc43008b711f8736e9feb3a822eea3c6f5243686e0ac49b0a1de3a580a0ba88879f6d47e491667513c6fad5bd4c87ede8db1ffec30f3660b8261173e38af6c2f84e5c75f5797c208d1c57b2d020a5e7ed280bf49b8a806739cf9ca2baba607b05d34c271f3bf5aaed9192b89a10a5900b4e22583c55f82724ee63446b7df635e5379402b11d8d70d0b1d3612a1f812eb41bbb3e4bcf432de714bfe582dba76ad4eab7a6ffb6b2d62bf47e1da56034bbd2d81ba743ea9b77097e63c0f8df4751140381e1b094e4269518a41a60b7af589d4af7eaa6ac8337cc531df38dc390ebbbbdc587c05962b0e5f32e45fc44a4fb6f6f1dec0acf3fe463fb37cadfc6634eefa9e0879274db1a6af2570d27d04d779a5af4a87d8b53226619eb43a29a89c3f4ce61979e2976853872a681d423c9b7a8343201b647cf2d4a81bc0e145ea6d23d507197c677029c07aecb5c30c7cb726066721266ba6abd9688b72b109600aff0a5b723504e4d014220d58d8c9d9ede7168bce766a1f3155b56507dd0245b333108ef93b69618818f07fa777a14e15531975a4c843da8a2ca55d30e2fe2e5edf7ce44e5480d8c68ad23e5842ff75ccfb8d09641ca549031b7eeb78047f04a4acceb0958a3a0f4581bba5823d62791f38e7b1b2f7453794b2eff39094891eed960c3569538959868b5f1ea2dbde5832d71a9c6f35b5b8d43caa87f090813e010290c081f85fcbab17b3d2df41996049cf2dcdfa87a9417104e77d618278082a67dcbda82c9b26fd9f86fcb8fbfd92226769618d719996b8eacf78ac31f8ca4a297339037419e2f87058fef9c191436fcbc4413684e88c26c47dfccb621e730b736906f2a235e2ed85d81c33959fbd37001330d252e14e9581e26c5562d4725267edfb0a178cd1606dc552c0eca5812430f5007b2a2edf7d0a8a17ade0171d6daa38d0d50c5005d35be2208a42fd5c9d21602c2e06fc974c63749c5a03f8f7262a304f8b67cc0ff7dc249a75190ed815599ee4345ad9cc818467fffc4a1cd5d762b227dcd4c02c34afc02606329cac0a3f41b02a2647bc3807c74d66c0865505818294fc6aa0e31b83848c524693dcfb2e944b44b092073c32fdffe26d360e8199f73be8f3c5ebaad29f39136cfd6d820f074b6812f4cea3c2c156259534fc4dee33c1dd8317c495082da3d8607c4881412b5209b06808293833d59ce637d6226a59dcca5dd2aa22c5f9eecf3866f5fcb112a38ecb6778194f249c565d4e2bec73e63caab4ea59922cac4a89a79f6fece5bb0e066e947fb61889863406d702a4f9380e7ce2aa589fe7e73fdaaa5cce3364016a0730a2fbef3be764d193a3084ba78cd26122ebdcbb7e60dd6523ede6de4ca60eb5e5770d65ad413c77776eb20b25d8881f9dcc51d582041f67ad983228f0e866e020af4a48e9fd01190460fb8b77139014ab0f1e471a362f8056464350828ae6b1a1b3a40e9a7f0c80d15b3889c9df29d57ecfe798f7e8803d54d64547694bba232e2b5a9e9ac62fddac8beb038e44709ee17c7b49f2d1643203ed77d3688aa307933bec013f902e4459ae7d5b1211bd4a598c131fed1b1317365681954038446463af53bf1a435b714730915dc96ebad029f26507904bdd9843ff709355e573be444ba3346195488c7261e999602ebe7210518cf00f078357d54a36de793a7e93656ec11d0de4a291e92d68319c7af41c3d239081c7582b0a7140da085ee85f255271815eaddac6404996304ebc37b02642c6e77b2af002291d0882e3003643b24e6d395c5f99a1ff8ebaf5dc51c1bd63403672a63b0a874406510e2ceba341a711425b71bba68033894d7c6d80c2064e8da1ab803334e4258fa9608218be1374af4b417bf0e7d4da4a2abdb7f991188ef34a5ffa6eb0dc626a48961a554e6ea6d69da47311303834b858e2f9560d870da876577f85cbf274d83699abef5d566dec60b8561ddcfd704d34d81b8c8c11482a4f4a264e4356c86eb4c2a06514c6ddc4e89627c8f66162cd404d6ec727b2f6c608e0ab62157db8f8cae32ac4b2286eea187ac533d4a4698fab7c91385604dc761f819706ecb3eb08ef2a19544009cf73b53cefa653be7848ad3d5dfe9b83141fac03be0af8546ddfa98325f9ca4e2ebac27cf004a13408f02fbd8c2b0eb3265c96fd21439f644c5c5cee69edbbd8fe164c15be8d9fec1af71eaca5a9be146492edfdc9d2991ba411602bb9139f87fbb59b0748c17fac6b8441b4966a90dda1410110c370005f72628c43ae906081492e4d9339f77fd9e0c355d41d2de55319a5e4d4cea930c09e7b0ba965844cbf38c15c84f1ee825cc3c000b0537b0922d52dc3f9b03eae1a5256928c415736bf3f6384ede4fc7e20f34449b840e4e5a3b84a402298f93d2875503523a5e97a2f5632b20a104b8059c7576615f54c71fc71fafd3867d046ebdac00130ccc98cba687bc9ceabda625dfb1b9a4cf3881f2023c1d8bcdd2b83ec0277c93083336249d76fc2e075535374d6dfc942e344a83c5e7037b28c0787f9095336fe36b699a228951db40"}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r1) 14:55:59 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup3(r0, r1, 0x80000) 14:55:59 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0xff0ff24e, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:55:59 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x8, 0x2400) 14:55:59 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r2, 0x4, 0x2400) fcntl$setstatus(r2, 0x4, 0x0) fcntl$setstatus(r1, 0x4, 0x5c00) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r3, 0x4, 0x2400) fcntl$setstatus(r3, 0x4, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r3, 0x541c, &(0x7f0000000240)={0xd, 0xfff}) fcntl$setstatus(r1, 0x4, 0x0) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000000)) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x149040, 0x40}, 0x18) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="1db9675b01004000060000006be4e5ed2bf87a36d7dfbccd6000e131ba0a2b1efab5802751c0b5e58b405221e9af45f83183e9a8f0ea8347744a3e9a4639b5cf5632964a749bf710498d4ee1d87a28b459b1120e45fd119e071cf1c2e4357187d53dce6cd12c828f", @ANYRES16, @ANYRES16=r4, @ANYRES16, @ANYRESDEC]) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000100)=0x3f, 0x1ff) fcntl$setstatus(r0, 0x4, 0x2400) r5 = fcntl$getown(r0, 0x9) r6 = openat$incfs(r4, &(0x7f00000001c0)='.pending_reads\x00', 0x24000, 0x98) ioctl$BINDER_GET_FROZEN_INFO(r6, 0xc00c620f, &(0x7f0000000200)={r5}) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x8001, 0x71c}]}) 14:55:59 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)=ANY=[@ANYBLOB="95eafd434f63bd25a4da1ae70b53cc233f6767534044aec63ffd2cf2f856ddb1fed22ef73b0a28868ff63de81f4117d18cea96b43b8aa9aacaf7b3bd5264cd716fb124c5d3c5f85ce16e2b5ce970117f2b4301dc80c2ef0d348b"]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, 0x0) r3 = fork() r4 = open_tree(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x9100) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x204, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r4, 0x0) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x5, 0xc0, 0x81, 0x80, 0x0, 0x4, 0x10400, 0x6, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f0000000280), 0xa}, 0x4000, 0x0, 0x7, 0x5, 0x7fffffff, 0x0, 0x7, 0x0, 0x6, 0x0, 0xd7c}, r3, 0xc, r4, 0x1) r5 = perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x70, 0x6, 0x2, 0x94, 0x0, 0x0, 0x80000, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x401, 0x2, @perf_bp={&(0x7f0000000140), 0x4}, 0x4020a, 0x20, 0x3ff, 0x0, 0x3ff, 0x0, 0x3, 0x0, 0xfffffffc, 0x0, 0x3}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x4, 0x2, 0x8a, 0xb, 0x0, 0x7, 0x39010, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9cd, 0x2, @perf_bp={&(0x7f0000000040), 0x8}, 0x41808, 0x2, 0x4, 0x5, 0xf6b, 0xc, 0x6, 0x0, 0xfff, 0x0, 0x7}, r3, 0x0, r5, 0x8) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:55:59 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r2, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) syz_io_uring_submit(r0, r1, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x65}, 0x2) r3 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r6, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r7}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) 14:55:59 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup3(0xffffffffffffffff, r0, 0x80000) 14:55:59 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:55:59 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x9, 0x2400) 14:55:59 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0xffff8000, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:55:59 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:56:14 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$FITRIM(r1, 0xc020662a, &(0x7f0000000080)={0x0, 0xfff7fffffffffff7}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, 0x0) openat(r1, &(0x7f0000000000)='./file0\x00', 0x103000, 0x60) 14:56:14 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:56:14 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x22, 0x3f, 0x34, 0x19, 0x0, 0x9, 0x1411, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfc8, 0x4, @perf_config_ext={0x7, 0x6}, 0x10002, 0x6, 0x1ff, 0x7, 0xfcc, 0xffffffff, 0x3, 0x0, 0xffff, 0x0, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = open_tree(r0, &(0x7f00000001c0)='./file0\x00', 0x100) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1f, 0x8, 0x0, 0x9, 0x0, 0xe0000000000000, 0x1010, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7f, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0xd8, 0x101, 0x62a9, 0x7, 0x0, 0xd0c, 0x52, 0x0, 0x3, 0x0, 0x9}, 0xffffffffffffffff, 0xa, r3, 0x2) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:56:14 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup3(0xffffffffffffffff, r0, 0x80000) 14:56:14 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0xa, 0x2400) 14:56:14 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r2, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r3 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x21) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x2010, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {r3}}, './file0\x00'}) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r1, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r8, 0x0, &(0x7f00000002c0)="a6cdcb826d2a7dc7d3092c9118e8dd2106f3feaa81378548d044a85d27fc5a289b38f5ca5c8d08b4bea640d9f538c8a45feb343c93161e0ce333e79b37087d7dc9a318fec3e05320df101f552a2dfd8d2b3435644ddc7391fa81cbd48eac4e4b7c5f00cff212accbfde3aa2085eecf50c680085d39cf6b942b52807aaf6691fd0406e428ac10c7d91c2f407a56d171676fb0cf650bbf178b4dfd8268cbb76183826b4caf7c9d13a4c93dde2caeeb14bbb5e968440c520e30a992f0597111d0312f9d24793f916b90edd77a8a23", 0xcd, 0x0, 0x1, {0x0, r9}}, 0x1f) 14:56:14 executing program 0: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="57ce010ad7e92f5490f1a2b45330d6c5098257d38fa47c9128fe1eab08594c5ec66412a9ab3a2a66aedbff4331ac837109bfb93547d7"]) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x7ff}}, './file0\x00'}) fcntl$dupfd(r5, 0x406, r0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r6, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r7}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) 14:56:14 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0xffffbf4e, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:56:14 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup3(0xffffffffffffffff, r0, 0x80000) 14:56:14 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$FITRIM(r1, 0xc020662a, &(0x7f0000000080)={0x0, 0xfff7fffffffffff7}) fsmount(r1, 0x1, 0x8c) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}, 0x20a, 0x0, 0x0, 0x0, 0xff80, &(0x7f0000000000)='ip_vti0\x00', 0x0, 0x1, 0x76}) 14:56:14 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0x220082100, &(0x7f0000000040), &(0x7f00000002c0), &(0x7f0000000300)=0x0, {0x3a}, &(0x7f0000000340)=""/77, 0x4d, &(0x7f00000003c0)=""/32, &(0x7f0000000400)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7, {r0}}, 0x58) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x7, 0x80, 0x7e, 0x0, 0x0, 0x6, 0x80060, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x1, 0x4}, 0x4028, 0x4, 0x80000001, 0x6, 0xe8, 0x8, 0xff, 0x0, 0xffffffff, 0x0, 0x800}, r3, 0xe, r0, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:56:14 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0xb, 0x2400) 14:56:14 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB="b5e2e65009bd10bed3205e1de954d800ccd1e2a084e59ddb00000000b13cf1d5e0f664fb74e61c7981ace38aff038d0a2aefd06bec8cfe7a6cffe11a392e09276e8d494e4784732cf48a1bed4b881704931cfc510a9f6a55198a09d52f5445c0e3e7278959c0af549e16bf0be1f4434ee5e21c72fef155c0e7020ecc550f4d8b8b9afa14f50b8bedb9d8a4200ac004489f2765d9adae1ef762cc7c3aa609d4be0d4a14d0a68a8262ca2d26f84afe1d49aa4e289b8ef1c1e876a17f80635754fb736f6bab01326c1cde09f3138279353b11f2553e4fa10af7e56959376d8a371eea8f46778a7ea8ba5d410b3ff061c59d239c455fcaad8e51bf55de"]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:56:14 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0xffffffe4, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:56:14 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0xf, 0x2400) 14:56:14 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) r1 = accept(0xffffffffffffffff, &(0x7f0000000000)=@generic, &(0x7f0000000080)=0x80) sendfile(r0, r1, 0x0, 0x712) fcntl$getown(r0, 0x9) 14:56:30 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) dup3(r0, 0xffffffffffffffff, 0x80000) 14:56:30 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r0, 0x9, 0xda, 0x94a0}) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/89}) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x9) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r2, 0x4, 0x2400) fcntl$setstatus(r2, 0x4, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r2}}, './file0\x00'}) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f00000000c0)={0x0, 0x5, 0xf4e7, 0x9, 0x7, "8cc208fbc5ef9e7cd934e4d8ef397a621f92c7", 0x16a2, 0x5}) fcntl$setstatus(r3, 0x4, 0x2400) fcntl$setstatus(r3, 0x4, 0x0) sendfile(r3, r2, &(0x7f0000000040)=0x7fffffff, 0x5) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000000)={0x0, 0xffffffff, 0x8, 0x800, 0x2, "37879f24dbacdf6111595d08c85617b7a417c5", 0xcb, 0x67d}) 14:56:30 executing program 4: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xf3, 0x0, 0x0, 0x0, 0x4307, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) syz_io_uring_setup(0x2280, &(0x7f0000000240)={0x0, 0x0, 0x4}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r3, 0x4, 0x2400) fcntl$setstatus(r3, 0x4, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000040)) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r5) fcntl$setstatus(r6, 0x4, 0x2400) fcntl$setstatus(r6, 0x4, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r6, 0x5000940a, &(0x7f0000000500)={{r0}, "7dcd6289364d6705e98c983325450d88847e172a46d30a20e345c84cf362e06b58ac0383536a6cf550db9b387351c84471e8a45ebc8f3ac27e98a4e8ac5363dd4b7454c1538ccb9ac26adf21d319894e2c512d5eacc014a04d91ab376977ee9ffbfdd9b676bcb2d11acfc258d94990ffa44b7dd1a5532af387bd560d3a7592c193b200d32a94b2cbbf9d08a57a71559b3996f9c648c9f8423d65fac504e8a2dceac50dc20daa71e51adb8eaa7455689cb9a5e24a638c0871710700a660210dcb0240a70ad68784020ab00a75dedfd0859bcff14127d03cde6c429c5645093c8aab1653edc396921056cb74d56d9cc73f4347a45d93c5b1560971b256faefa6039a8070e8a1a738bc17719b1e10895675d754edcde41536e55b182d313fa75681d74f8e7967f9b0b2433310e71d87e1879c8f427d202d8550a75cd868235a9905ff8cb9d7351119a21bb5807d42a5f443977d549afbae6871065b5561cc63554f92c03441d7c1f3597aeb55da3565754fefaccb174b2ba2d23f933154a86d8436c4e4661d079be5885bcb48712c508752dddc61339ee0d6b483aeeb1c051895ef947a238b1f93058c33486a0e58f23e2ddbc622c44430c8546668b674581c9eb3334f0a16c8715129a5fac58ed9c698ac7d84db33f7eb008a969d71b16561f1d285f54464b9049af8bd12ba1158346a2c8ea4e9657b3e15fabe89102a799e54db9e134b0042141b34ce49c2390f0c83ccbf727d54433246d18795fe63631d1b4ff4dd111132cd830f88ab792ad6d0242c02720877ce7bf2b6f141cff4d7b6c5bbc70b996c7da224a72a04638c07666204c6c32dc47b319290e3273cf2c998ab7110fa078ae863b451fd9e8f7aa6daebdacda9eb7b15e2e2d79e4237493d16d0cdfcf22f1e82b821f2aedacca5a570b2f61e694323ac425e6420ffb3f4c58f2ed2c6319eb5bf6a7b991e63cfbe358f66c240c1d8d04c3334521dde7fd4864792392bb57d9980f601e32429c190bde81b43feb021af6af265d9e6fc07ff046b882c5f7d5805c8aab7bf279e42eb23bbfc2a687ebb8c2db247d85eb7d7befafa1055f29c66f710ed2430d64d348580e13b0e81815daf8c4b868d3ccff0225b1cd7860d677d54dcc8345182920add4333a3b61ee51f38e16eabf0522401be33135bcf425660cc0e608c498166163d909ff609026b692d322ff92d19dc5a5e7cae6afd8536accf6cb3eeaa027f454d7b200d83c6fdc7eca01e480f6a2ad0ce22fd5cc32a5c225274c594250aaf2955d01e9e6d5d3e70504b0708c84f8643efff3e76b182d8407934c6e5791aa17df69ab9d3c5501bcc9a6427db81f574c59c218adef9827502b091408dae3d73b9b439fc9781e6f6cdc9c423c94177567d69fe421fe02765cd294b507bc0a52f6d33508bbd6509c1b1f6e69f5f3a6d13bb4803b9aa91a48c0adb20323e7a20c8c630b13827ec1c1460aa27d8418a998dc18ca11e946e5e8b982620de752c88015dc9e9f4c9540be89a7540dc52caeef344703f340628ab624ad83d7c6768020c3659f29e40e9742cbcdb0a245b4bd3929190dce57a951c4d6cab414e63c877db166a6aff7a2970038bef01b285753f01e3a86b976f0261d70ffaba232ed1bae355a79f46295f3632d4f1ce677b8666daa3010c96d96578f6abeef370af32cdb2134a5662433c75b09cbcaac757c9a05694468e462be4c058a6b4fd1979d92084ee6b770d64aca26df0179273172cf075bcf6cb0ac9937415144f81e615771b43fb23dab0383e496b887a6ba9b49bbf592333c37e5d8497a776706061397e9e3dd1f0d7697beb527d5d570e54855c599f9c4d77447252a29aaee1a129bc66b35a1e7e75bd62931e7f3b021985b85c288f016135712028d263ed6320f79b7a6931de672b3c5f6fa767ef788b8454c620dacb305403f43285da23ccc92e5532980717117118f3fb167afcf9f7c8dc9f9767fd728742868790ed5767b83503070849df27dc0e4d8ee88010f169651380f5bca188bafa166cb596ffe3525ab1fdec7d1734a0029fdbd1e124de1dec9dc80f28108ff8c05fc873217f097098715a49e6a40f679cc9f1e2884546d24628e304f0531169d3d18e09c5c065dd279822db1aca8c14697727d2e566605789af65fe5e33fb625062bb1689e4bc415022ce3c3c4fbeed9644ae9f6441db983be32ef263d9f37bb662fe60542eee979c02c2cf1254d6490fc658486f6373046b6a33bc31c31cc1959d89f8eca8865294465d8b96c351edf2d729e98359d4037f32098d247ae120d6cd03fcb2420faacafe748ee70a7d687cf01047e5854ba50bb9eebf5a93b93006865186afa01dd86cf464a1f531e7665097916f2b6397430b00f2fa4cba1e5be337f9f132594e6dd0ce158c2b159327fae38a9871720907aea5848f7d0df4191b97bb293d8d662c80b414a426927b8f72ead0ccfe1181bcf60eb05b2c8f0fa7d79e2bc9f182ff690017e3c75998f257933207c1deb78ecd59adfffd7f1bd622eecef01e7dd35ad006bc7c1711a98a5da58cd86bb3468e839819c325d183dd04197b050745193ff4121504b3e1cf5101e062056c516cc062afc8f3378c0920e013a23b6e5dbee55919e28677b8549dcdf9d3e6f48066142f073005b6afc986d04b776fd060f4ba363cfed0465f15524b9cc21f8159095164302657142a3482c1dbce92abf5c6267461716c48ddd909769299a5d1c1b1b9a390c91cf3a2576658877969f55d8f838edf856a24d9b4e65abb53df61e1aae5d2c197efef585b6a971b2c6964bc3e3b385ce03d8ca78f7f0c0d16ae352637842e08204b7ca2991abe15fa7bbd2365cab6c0fd16fa3b546c1ef46687acdae2eb657d810d9f68e252ed6dffe89dc0c109e87e56997d15b3bcd9c1ca9fd1425bf0476ecfcca428a1a14abd6efff9ebbcb626f5f363aac9e0eb7acd0b5d8d4c8cec861df519f406f23824d26f6ccb2cb749e8fad2a30e02181e89583a7420d5bd166f087ee1e5aab3b6ee2fb4e970d83da86552d66d42066db71d15f917d3113b8df6196bf03420529108ae9b2374af48a1ed67f3f66a69017d91873317010e68cb91df952e9e0cfa9a9e131c92927a48044ee9ed54b2b6f4445930b062ed4e319202c1e8138e9ebad5bc28be5091a4f155afd13625d6fad5c4e6872c744eea07e446f14a9f972060bf86935e9d5dd6430ff1226cc141ad89ff6a55a769a720bba8d5b7b2f863b559b05055ee57b9062850bc34920e38b5fc094dd1f7985a0fcac8b78d03e6178b09ccd7717df3dd5fa88871fb8274f237a43014358d3bfe0b6c79ac34a64f8f39d987c219f9d44e0f4bf5ec9e01bc728df94acc56d9314a82ba84a295facf2229d93b0c574858f2f32f8d1c2b8596f38e34115c7b08209db667c1417e16fb3ec6e471d0981a015cec51309f0b1d1ed2037154716bb40775e070aa51b65b2b827389e19034c3a175c0f3c2e474650ce6f3aac79371fa1112f98e770c7eefa4037c3dc58fd09f81c3e20967cf01912f72a4f006727f4840a99bf65585d6294b500a7d979fb519d76915117c45b75e937d7029d6522039305e0f90e7a0ba3e60649814e287e3bf9cc736a44a885b21d6d2189bb46ba335503964ebfb1253238266942093257a3a5c55984a032597cb8f8da60b15d9ee1fb31914e4d6909147ff168b5162460eb14b5e63d52339aa4ba08ae3a5f77c28a0a6af31fab1726eaba12555dfe6b8cc3e77f20b8ca303f92f77e4d6e6b2fdd6f71a9b4de376fbecf729bf94307fcecb7a010b5a6d8db634e1c0c51fb15e3fdbf5a74de9d8d74e95241225c43c9526e0d77f342c2a58a5235a692d9b91133acaa8e37732d662ca63564ab79aaa98f7485b6aea4fa1f3cae2ec32aa70335ada89e77393ff6fff813af1c54fc535f9b40da2bceff23ce4bd79cc93b451870f1fd3cd1be6d2e0a35bdbe6fda0770bc7e96fb2cbaba613ded08e0ff11759dc6d123746adebf9c9a60b706eb0758ded57dd29f3c6f42aba9acd4978f97d3c58061a52ee89475c7c91f56f3763afed6691a9388b7d895d24d6f9fd5388aca08bbbb7ee78586c1a0caadbeca3af55e493f64d6b805aacd882b7e5057ce457215f2db7b0649987bcd3443106df4602eea2be237bc9d47a44d655727e61ea6063c544b55c06790d78d31ac25c8371f99fa7747739b044b799dec5754f51979f1e0e08ec00122102eeb1cded9ff37d9206d79e6a83239bd6a6c0f38e4ffa49d9ecab0613ff68f8215110e272e0dd2af88ee204f2f58a445fe42f0f0a9f59c3c9c119a7646915189d609c8d9a18a44f073e331843e27542dbd994c518c1e7cdf04a3f9e39e380c5c43a1e205dc032126d541e6c3eb2b90990f46199a89d9fe15465935fd725699d61ea7f4070f694c804fad4f8bb332a589f58d8c2495303b4d4d9c4b8b1e269ea8c1a44c590375db820c082129f778b3f8f10649406fcc375c7f198ff9982bbb9bf97d4940a0988e27877b484a7f10cba31d2bff9dcfd966ded0d037cac432ee3e95e1b66e7ba7e7775b1c50c5366a865dce29c0dc50efd0d559f97239c18df6075b24a513320f077ed7f04c6d42b78042d8e92b5c61d17d85379b9d474629ebfe9ba1cbce08679b9de096c7ad28e0174528fdfc71654a0a349aaed21e0e89cd82d38bb7da42fb17e88055740883be84944c7b841b1f481d1eb98516de3ecc5ec75b23c5f296e0c9f679ae336e7954e6b14662ee90249f2dd83a1aef8f526264c08fff3e2d49963efa68a5e486d7ae1598f9ece3db93d89491a8c09f3cb894f102b7ffb349e2f51a32bdfa0ae2864ad1491a0f81453a0297411fd2e954ae524773859b7700574ac3802b44976288d49afe37932a1dd8202051fd17dcfd6957a5317ae63b4681361455a539facb437c0b8400e3414633a422a17016d7dfacbbf147fe98d77f968bd53f1e995e48f1c728b38f7693056af0447984cacbb7639c4ffc001d3c3bba66419c6f637dc4f3e361803bf0f8f3b4170da1da44e21d7d9070eed26a9a2239ac69a42f01e655a902c54710cfe30cdf5c7519c970e44409a5deb37f695a6e1a47114d8c237bcf107879c9235a5caaf24b7e58b13a1f736508e70bd2548a1c9e073eb6b65a5a1ed806b8530380ffe812d5d2cb0c032c3b182927fb92c2c69555d8d91874da44dd641cb2aeac04513f586fc41ee6b7eda92a929724eafc056d585b296c82f696d4803efb46b9af25f0da456019e9614209b922aab9a63baa397724b07fff3c9390301ee19acef71ac086cc7351e1f0c518f1e224cd284d3c54cc1f263eb9a130df5860b4e24e47d9374bdde84448ae82f674ad632230c8c7339de927dbe4dd053ad83f3f6d180faafc151135127ca72e41f7e2220771f25f649b9b9e68ce2b0a1887f3ee4f18a336eb020a71c3ad914bb7d39f0a206bc5d3151bd6cb4d1a15ee26fb99e8b7acaab5cc3f87cc48d9196ac1e8fc67056aff1865129de95eff78e738638c5e1ff9ced5ff56a83bd96598785898a5899beebb5b32e33ace6320701baff9acbd747716edd5dd62f7829d9bb88399b2d40dc271f6f81012564dbd2a1656fe0143ed97c99c2a0c763363777275f936e4ff7b45f7cc6f97194fd8cfdde819a7cecba4a69a073e021bb669309e695c252111999a72410db5910f315bfcd34b53d32b3eccb992765753603601a2f5ef319fd44a7db55830821f5e1398d0011bcb1fab9ac56ae6af63ce4b24e3c1ca7e928d70aa5343563c222976e"}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, 0x0) fallocate(r3, 0x8, 0x5, 0xe6) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:56:30 executing program 0: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffa, 0x7}}, './file0\x00'}) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x92885bc85548c19a}, 0xc, &(0x7f0000000300)={&(0x7f0000001e00)={0x5c8, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x41c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}]}, @TIPC_NLA_BEARER={0x12c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x6, @empty, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'ip6_vti0\x00'}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffe}]}, @TIPC_NLA_NODE={0x230, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xe4, 0x3, "fadb3641dfcc1a10f7ea3a00e042b2099845a8ae53216de317ca8bb0a07912af5359f73360ece9b00c176b3d090f98c5e5e507eda9c4a3a89aa0465400122f52c7815b8f4cfd8470324a29d7ba62b8dd59866d332f13da0ffbc59ce588216c400f51f7459b4fb58d5cc9c3b0f327cada171d1c0d56c858705da6a355e9f10a0cd954f531eaf8667ec57370cc07c25b7e43c3b1546dcbbd8cb9222a476697c1514778c0812027351f8922eb748e589831b4e166b49b16ab89e48f07f05f6a537ce5fca906ec061bc1c1f461886d13c0c54e64164922e490355aafb9ff11ba8512"}, @TIPC_NLA_NODE_ID={0x55, 0x3, "9256d8264ebd9078e4e83ba4047135888f80ae6e54e9785c3cda4281a8cb907e3bee73256e2f1d31b4b1f60efa4bb558a77086d181ebc2b723e637581160d31c5e9f7e122ef83682051cd6ac53bbfa9610"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x79, 0x3, "b0dc26feef8cb14130b1b87a9765acd479852f6428db57dce54869d587e92d8747c6ccde3698bc6bbd0d0d175b446eb282c9e9c439e09e8a7238cfc9f589c4f089ecb933b446e46b56852941e9746178edd337e610a5b4d11408925978b87ece2e0c2b0ad0f7c34aebb80132409df40366155640b4"}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "20c3cefe407527e2b4c2be2d2dfb79d2fee2737bf6bcc385"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x60a47a1f}, @TIPC_NLA_NODE_ID={0x25, 0x3, "fef16d271d48e95ffe977e5479b46dce9b911134d98a1cea1566654066456b7437"}]}, @TIPC_NLA_NODE={0x180, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "0728a2f4f29115c3cb7eadafe6c5ace3600d450dd9a37c045a4b21177a1a7b96e762f0ee"}}, @TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_ID={0x48, 0x3, "3886a74a9c464025b00580cd14f592b256cda68ca09395274e63dc371e9852021a309781a9b5aae4a8c2485de5d0bc60715378ce9f6c7af5dca51da79a0afdb4affc776d"}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "7d85d8f0c24403ad7571436a31397d6e33cce6ec"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "b209778d0dae96053e45332e1a9756b1d2cd850aacb03739d5cdc730cd6ce1748236f592"}}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "329217c865d6b54e8795b3be6e95086b7f26cc9ddd9ca0e25c"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x38afbf46}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}]}, 0x5c8}, 0x1, 0x0, 0x0, 0x20040080}, 0x10080) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r2 = syz_io_uring_setup(0x6ad0, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r6}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) 14:56:30 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x3}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:56:30 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000040)=ANY=[@ANYBLOB="dab2fade5130354af944d07162a5bb77316b8e03f2cbb151affe"]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:56:30 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:56:30 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x10, 0x2400) 14:56:30 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x4c00) fcntl$getown(r0, 0x9) 14:56:30 executing program 7: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) r2 = fork() r3 = open_tree(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x9100) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x204, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r3, 0x0) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x5, 0xc0, 0x81, 0x80, 0x0, 0x4, 0x10400, 0x6, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f0000000280), 0xa}, 0x4000, 0x0, 0x7, 0x5, 0x7fffffff, 0x0, 0x7, 0x0, 0x6, 0x0, 0xd7c}, r2, 0xc, r3, 0x1) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x4, 0x9, r2}) clone3(&(0x7f00000005c0)={0x9043c0, &(0x7f0000000080)=0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140), {0x7}, &(0x7f0000000300)=""/189, 0xbd, &(0x7f0000000500)=""/153, &(0x7f0000000180)=[r2, r2], 0x2, {r1}}, 0x58) fcntl$setsig(r4, 0xa, 0x0) r5 = syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r6 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000006c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r6, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:56:30 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) dup3(r0, 0xffffffffffffffff, 0x80000) 14:56:31 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000004, 0x2010, r1, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:56:46 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$FITRIM(r1, 0xc020662a, &(0x7f0000000080)={0x0, 0xfff7fffffffffff7}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000000)={0xc7, 0x2f}) 14:56:46 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x11, 0x2400) 14:56:46 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x1d, &(0x7f0000000100), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0xfc292a8c574ae91a}, 0x0) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', 0x40, 0x100}, 0x3) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r4, 0x4, 0x2400) fcntl$setstatus(r4, 0x4, 0x0) r5 = socket(0x2c, 0x3, 0x4) ioctl$BTRFS_IOC_ADD_DEV(r4, 0x5000940a, &(0x7f00000006c0)={{r5}, "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"}) r6 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r7 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r7, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:56:46 executing program 4: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f00000002c0)=""/202, 0xca, 0x6de) pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:56:46 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) dup3(r0, 0xffffffffffffffff, 0x80000) 14:56:46 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:56:46 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x4}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:56:46 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r2, &(0x7f0000000240)=""/83, 0x53, 0x200000048) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000340)=0x3) ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r3 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r2, 0x0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000380)=""/234, 0xea}, {&(0x7f0000000500)=""/53, 0x35}, {&(0x7f0000000540)=""/192, 0xc0}, {&(0x7f0000000600)=""/239, 0xef}, {&(0x7f0000001d80)=""/4096, 0x80809c00c1f4992d}, {&(0x7f0000002e00)=""/232, 0xe8}, {&(0x7f0000002f00)=""/102400}], 0x7, &(0x7f0000002d80)=""/118, 0x76}, 0x0, 0x100, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_WRITE={0x17, 0x3, 0x4004, @fd_index=0x5, 0x7fff, &(0x7f00000001c0)="1a0caf7418ee35995c80d4f5fdb3", 0xe, 0x2, 0x1}, 0x9) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000300)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, r2, &(0x7f0000000040)={0x18200, 0x1, 0x1}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r6}}, 0x5) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r8 = openat$cgroup_ro(r2, &(0x7f0000000740)='memory.events\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000001, 0x50, r8, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r7}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) 14:56:46 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x24, 0x2400) 14:56:47 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x6}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:56:47 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x9) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r2, 0x4, 0x2400) fcntl$setstatus(r2, 0x4, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000080)) 14:56:47 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x25, 0x2400) 14:56:47 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000100)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYBLOB="ddb5f9bfa559fa73539c3d8f431bec0959e4f30538e56b9239a86837ef1a5fed382f16c947c4d4438e59978d3799572577730757e564bcc03b739eff4bad57ca93b7b76b53662af44e8de147fe1a78e4c9eb0d05c41c1823eb001f29188def9f3490814ea55539c405adf37da4aa2b4c7bdda8f09ead445016e8b637542acbb158fd2f3abab83101df09abcd24291e8eb3697f541964eba13c5ed3a9d2b899d6086f36587ccb7e949c13bbbfc9232b16ae620a11f9fbf728e7a33f4cfabffe521a68b1aaa75558df0115e5c3f51ec2ae767a92fae930d82c1e3d488965d087cca856a7e5a7b63f253962d26c66f861ae6fe9"]) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r8, 0x4, 0x2400) fcntl$setstatus(r8, 0x4, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000600)={"9e8c925ac12bd335743085881a5442da", 0x0, 0x0, {0x4, 0x1}, {0x10001}, 0x7fff, [0x0, 0x0, 0x4bd3, 0x9, 0x9, 0x10000, 0x4, 0x7fff, 0x3, 0x5, 0x7fffffff, 0x6, 0x81, 0x5, 0x793d, 0x2]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000001e00)={r7, 0x20, 0x1, [0x4, 0x3, 0x20000000000000, 0x9, 0xff], [0x2, 0x3, 0x4000000000000, 0x800, 0x4, 0x0, 0x9, 0xffffffffffffffff, 0x20adab71, 0x7f, 0x5, 0xdcb0, 0x3, 0x5, 0x1f, 0x40, 0x8, 0x8001, 0x400, 0x9, 0x9a, 0x8, 0x0, 0x0, 0x3, 0x6, 0x3ff, 0x0, 0x5, 0x70000000000000, 0x1, 0x3f, 0x0, 0x80000000, 0x2, 0xf68b, 0x1000, 0x2, 0x1000, 0x0, 0x0, 0x40, 0x40, 0x213, 0x5, 0x1f, 0x1, 0xa1f0, 0x3e, 0x1, 0xfff, 0x0, 0x1, 0x8, 0x1, 0xff, 0x1, 0x421, 0xd911, 0xfff, 0x40, 0x4, 0x1, 0xb5c3, 0x4, 0x8, 0x8, 0x4, 0x6, 0x2, 0x59, 0x6, 0xf586, 0x16f, 0x2, 0x4, 0x1, 0x6, 0x1ff, 0x3, 0x4, 0x800, 0x6, 0x1, 0x80000001, 0x10000, 0x100, 0x4, 0x1, 0xc8, 0x9, 0x100, 0x5014dc49, 0x8, 0x0, 0xb4, 0x2, 0x2, 0x3cf4, 0x999d, 0xfffffffffffffffd, 0xfffffffffffff267, 0x45, 0x0, 0xed, 0x1, 0xe98, 0x9, 0x7ff, 0x9, 0x7, 0x2, 0x0, 0x1f, 0x3, 0xffffffff, 0x2, 0x100000001, 0x5, 0x0, 0xfffffffeffffffff]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r8, 0x5000943f, &(0x7f0000002240)={{r2}, r9, 0x0, @unused=[0x7, 0x8, 0x7, 0x4e2], @devid=r10}) io_uring_enter(r2, 0x6980, 0xe22b, 0x2, &(0x7f0000000180)={[0x4]}, 0x8) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500e62d00cfc5ccfee79b9b403725fdec0c000009000000140000000001ffffff000000000420aa80ca105965500000ffff0002ffffffff000008000900000000000000ea54ffff2100c1714bfd768f9af0aba381ddd23ee4038dfe5a2255739cce14c2becc470a51a38921a2b1efa1a7b0dd8bb94746b695395ebdcd3f694dfa921000000000000000f7e44f51005936066147a605ff5cb008eb0da835e9226cac864b377453165fb6723d7370cc864cb760fc2700"/214]}, @devid=r6}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) 14:56:47 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup3(r0, r1, 0x0) 14:56:47 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') finit_module(r1, &(0x7f0000000040)='#,-+/,\x00', 0x0) pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1b84, &(0x7f0000000140)={0x0, 0x6ce0, 0x4, 0x1, 0x230, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r4 = accept4$unix(r1, &(0x7f0000000340)=@abs, &(0x7f00000003c0)=0x6e, 0x0) close_range(r1, r4, 0x2) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:56:47 executing program 7: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) r2 = syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r3 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r4 = creat(&(0x7f0000000600)='./file0\x00', 0x100) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x80001) r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x850703, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[r5, r2, r6, r7, r0]}, 0x5) r8 = syz_open_dev$sg(&(0x7f0000000100), 0x7, 0x8c9aaeb8547a9ffc) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r9 = openat$cgroup_devices(r4, &(0x7f00000022c0)='devices.deny\x00', 0x2, 0x0) io_submit(0x0, 0xa, &(0x7f0000003340)=[&(0x7f0000001840)={0x0, 0x0, 0x0, 0x5, 0x5, 0xffffffffffffffff, &(0x7f00000017c0)="6f6e4522f3245bbe0a2f74c98fbe22410ba347c4beaac4827b5d759ef3b3d54b210f4a8eac613471f7e70989dd4782cbfc92ccdc31cc8aef38dee2f6c5f98cd68d86de1683e97473fe378a4b15258fa310423f5387f230fb5c4b4a6321caf2987f743ca5534757df8209bafabc9b80e57e0f1d7322fecbceef4c", 0x7a, 0xff, 0x0, 0x2}, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffffff, &(0x7f0000001d00)="ed9616caec44efd4f6f17dcdafb7ffaa5d12be98d1b7236de9db5fc9684c76bd2d50515bc9df2ec53a4ca940fa1d9cea37f37feff4de33fa65ef68386f7cf1dec544a2f1e22db031bc5609d71eb26f104bf4c4c357bfd7e18e888583c6450609e32d5235ba32494f8d075c1f1b6238db9669a34d4eccd88ac0579657de9c9df19d7e17776dd3d3d105d5d978be573575b92fb934b517f049999aec59fcf68a1401ce6e4d2bf50944c3c786b1d55175cb", 0xb0, 0x4, 0x0, 0x3}, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x8, 0xb18, r0, &(0x7f00000018c0)="78e7d768c8deffa2212309ce1573d6fecdf1", 0x12, 0x7f, 0x0, 0x0, r1}, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x7, 0xe260, r0, &(0x7f0000001e00)="1b0b367aa2c15c69b197ba563814e14725b8dc2ad3430050bc16f5345490e83eda8351921b13ffad11667247b0d0aa6b6837ba8ae2c0d62d53d7a463bd31b33af0868a947e669bdd5dce", 0x4a, 0x9, 0x0, 0x2}, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, 0xa302, r7, &(0x7f0000001ec0)="9ee21135b3beaa4aebb81906a0b6915a60938915b04ea015d401134dbc9f9179e4336126130f1a6e0f0629d36c58c6a129ed8117879a405222a2081a2a4cd90332222446f7f9c481a3af267642c4c6eeed1203a19f5818af282982dc404d65ef6bab4fbb9b11bf73061df3aa6cb8e0fbb76b66c0163a48eb94f5fa3385f3b78e1f3e5bf51d46fbbf34b4ac1330fce05be333c29b8058b5a87c48a10387cbdf34cb5a19ee751e5e9c614273f3d204b0bccfc4f908d1cc74bf6ce8a55965584b", 0xbf, 0x6, 0x0, 0x3, r1}, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x8, 0x101, r0, &(0x7f0000001fc0)="9097561caf3eab53a6ab7f69dc14085c12", 0x11, 0x6, 0x0, 0x2}, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x6, 0x3ff, 0xffffffffffffffff, &(0x7f0000002080)="f66484dc1a847df3a753d2a65b9f2a2ad28ba444e138c5561abd616bed4bcf7e51ea493094842b0ef6fc8e6751b63ee9de3a2d2980163e530ad88e1e52f10a9b14f4f559050f88b5dcec4554c8bf6bf5f45b5eb2b7751a", 0x57, 0x2, 0x0, 0x3}, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x6, 0x1, 0xffffffffffffffff, &(0x7f0000002180)="ab5382f2f62213758dc0d8321c4f1ce21104e506a92461789aaff1a836b13541953af5110b41ddcece68156354c1c09c37255f803e0c", 0x36, 0x6, 0x0, 0x1, r1}, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x8, 0x7, 0xffffffffffffffff, &(0x7f0000002200)="588ff7d815c1789e4f708a71232aaf157fef1060d143d5f66054b53d7505b6010c0a4fa6665c3be0f3d2583f933ff589ebdbbf30aec4f2c591bd2deb0a017dd1bfcd4691201f53319d9ef1df77453b1d50426766741918f3dd8c9fd4ff64b35454c0be6212f017b129df1efe3ad9138d20e955b0603d4d0e7978", 0x7a, 0x91}, &(0x7f0000003300)={0x0, 0x0, 0x0, 0x1, 0x9cb4, r9, &(0x7f0000002300)="b410d32a3fc7fe613f6798cf2b916d28c0d8e609b3e52e5e4f48f3dd37b7893d8cf5b990ac0673ffaa8e7af2dac5ab5fc68ebc5afbae85951eb3767b6805aaf8e941383e38b18ae6ae9aaceb1e0f02d5653f4ceab0180357d3e1d64493328a9b87567957424a4d0c4bffef98323f344eaa6acd51f12b0481bbba168ed2fe3ae870dd01d99388642b83b92fc4759f944a9adccd65335d9bb6053fba98c9b7068eb865c3bd373363d2de6682fb70c4942b21e928dfc5c6432af01bbf37e7b3eff7dad419f4fe5bef406e32aa2de1be16cb9b3c4a28fe98cf87528bc5d97aabb4fffbae9cfc31710c86aa0abdb2b26dde448a4e0e5b60cb1f56186d6a8cfd9c4412709fd8f59b11a0947d314153ab166a768b6f14f686323744f1dbf69184cdb806eec5aff764c859bfff3a5574fd494de164c236901a535fd238fa6b94c1fff85e331d08181f902e59f20adb45dddd13c04738f9aa2cad233bd4486e665ae72edf6a063613fdd0019e9044af0c9d0dd99175193c2a349d58e1e581ca09ad61f671ad9ff741db9a8e60458c1d281413ad36ac57ad6aef490ddaaca95678775197b2c25931d964979490cf656804f4c4e952ae6e1d20e732c6e04d37f579d486860cca7059b250e9f1f23f6f0acf98b9f6c4ee3a29ce317360a6427b3df9d3471a52ac8e0ea26891d8c4113d6785092870a6c48d6bcae73b73895769d80344d38d327627ed003ad8105a7368b0d2f271b55c064e2c77ca9a7654e9d1f2ffb6be078128b44f32f4c00b4ad212c54c42e40a0615683d947056f248f8ddf35dc85c27924eeb8bc096e97a55b02145c010a7739fd0849c6d9e862399a233ba4b979d76c8d01a6338712b0f63a36d179af7c810efb85110e9f82b2e51e78421e6c3264a66862fa9e830a89d036f6073a5ce59c0bcff6afaf2ef602fac13bb07852ebf0b9778e495e61c7a30bc75589474877927fcf10f44e2f267ee6771a5aafb367e5f71a828c6606b353e11df3cd028b909d4307698c24add546bacad56fedcced2a167a2ef14bd57959ee35f723fb2996791b52e79f442ff0448dd03cbd5313c10b6280c874aa3fe4a0e51f0da6448c7d8feae1b9e06b3c77d020075329f9885e2688f3120422ad2badbe58694fed3bdcd8aa2bd72dc4dcbc4485dd697eb3ff7f6e305b4b2656f057cdd9c53b58fa6cba7a1b2e15d46eb8bb53f92c21bae425c54b9e43fa97a387f3e1aa0cbe486666101140138e511ea6ba96f003f99fe9b67b0cefeb4674974b152eb2e8b3df81e2f1108ae28bdbfc33c8f7ad5fddbf435a4c7b7f3da078319831dba21b7ee01e563427f52d0728ec2943fb60504e3beef5cb6599203272241b2f3067fab20b147081010d58ae452fafdc4162492a9467d8ab07a82d06ed99de46cb4b139cb7f12f07c094ebe4f5a0406656f4b8db6eab6043019540e605358da949417436bcfcaf52663659729a732d6c42b5c89e55439cf4de5c91e7550579db8704170800238517ca656ca5bef739d33601e60c48ed11ad81f3631cc1545dfa388599b3e1cf568679da792207c4daa780534062bb8d47958d917d9ce5e81c39c10b2fb72eea1b411b1c0326b2144d3f6930472bde43d2469833cb5881805ab76f3421204e5407f71b6e467f2fcb9cba49be30b7f9bc17b57a4579ab47d55adb7e52bf7439b04dd186788787775219fa7b75d5471399882da0b4f6d34ab00eea3a259721b7eb6b76ca611e314101b6de145ee04cc07756e5377970433cd83a29ac78684064e15d74a6c7aedca61c8fd1318c86d4151aed1fb1381325435767f3722e5a3212b72302c2d0a64534345bfc8fb05bded67064855980b8e5d8a136715d60a98590e0d43a47e5c61e0bf2eac08651e986f5dd00af3e34846df1846093c17c090a0772739ac8d4eaf250f154927818b24706f59051f90a92fddc37b97b9caf50e6b7480ac7806f5b6e08125ffc59d86e59b0b74831da1e3e07495f4ffaedb19987190a10aaf0b41af92d5e3caf3d4cad9fd44dd3663776a97cc610235a841ee989b2566681c0985b4e19f090bec49a747a586f75996fca631f2aff460ba478241dbd79b9a97db43347e1e16a95ea3e1f370b7e566866b5a792c89c26d5810d12bfdeb36877701a054c3f709131d70c461793cf3dd8e3e468171e3e5e6b835d0b66e26b4f0504ee3f4c116c9b6353c26c9621187298abe31328694f639c648a7256e356f17592a22f0e15887d77d3a69b4dfd798bdbe264ecb3a7ea49a61b99ee918814d4d1341a298a1e31fac7987a4767a577b5753009caf037ee9a9dd3fc4f7f43a6580688427d3d70f9a3fc31554db62a443ce9241256a07381edd70070d06e7d35cf029736b3ecfe833275fcd3cde2742ab7a29e53d0dc4d7b586524c6f08f6f3ac45d40a0a8a14190c7b3adc471a516f9fbe4134e354136263a51b9f451a35473a080b562e12523782eaf3beba402518fc051dd391cb4c84c98d9da0b6e6d9b137561c6bd24c75e55467093b1c50c6be678d2bce9c54d219a4c0f8486807fc7e190b4416b6bdf692828c9d158a41f007a98ffba0bb179fc2046d588faf424719c9f3cf9ca24543a202d77eb44c742ce4a4c28ef02f56bd64fa229e03be7003f4aee32a3814192c037cb8b32926df3bc65349609573f6ce176257ce5e2bc6a2ed88a7855d64eff2483db2a4e2fcb15efb83ba187413855dea76af15cdaeaeea70e8e74cefa2062a35e427428ea07c64b8de4fd472ba4a5715f16f3f1f5ddc554e7c57087895631dd921dc07de71e07750f8ccd57d3ae74e8fb1c54530ebb28ed11c18c536eac3d538622942a184e025a9ca57aaee37a3a7473731c60d572bd0c722ab105e8223a1304ebd61677ab42bb6e89ace87029fae771afca9f7d4b8762d268497b1837df4db24910aa0900d8ef3d8b008eb48a96debf33cd4205665188ca2406a3fd53a36b56c62103a8220fa2c7f4f5f2915cece050f5ae84fdf4960636b1bc42e44f24dc7781892636438acf7d23d2271b985fc12ea34ee83e09506f0b7a4974489350d98ce9893f5278ed729161266b690eb84e88204fa4c086be7ce12dce53b64f4dde4c2f4e97f828d85832ea60e9bbadd84cecf45e0e178b8feb205f190760b5c2e76c26af7e496d833d0a6cf57a52798e10783fe1bcbd5661addd06151fd5111f6e9ce74db9a0c4e57d2a0af5aeaa0f1fbf415d23150a86cb4829af4cb152d068bdb6e96fe02ec7e6e7b424c904e6c46fb56b6a109d17070a7d8fcbca5d81216b9baf255d9f112252716ec67b87a0596e057803f3050bac555c8fce30736fe9be1f0d6e7fb8e607c7e1491bf14fc0b22bfff420903c7215cd131839cbb32768ab4226d189604a0a607c7f197ea6082160bf2887061fa6b60b7c5031753d82fb0187f9e874978c4d09db07fb245535b29f71205272843376ea7a01de5ae08fbd38d87c001b846c0354f8b91a0cc14922259d80760f8a8ef8582346659de22b5e7e10087826f07c0b47e51fc6687046dd97491cd90c823aa38c5bb782b2dbc9419e11fb927e1187d34619d97e9d66482aefb6d98e4428a48f6bf3fbaed9efdf0ca26e01b5861d1cc0d2592d26e678660841c7d4aaeb65cdf41cdead34ac526b18a201c33be7f7bb1e8c09fa4d23adfbf61a66a803886c4a4a0f7442eb19ea33ddace4281c3e1b530e06e1f1fa6d23edaa5e218229cf553b93044a1bfa21e961fac520dbda4717d7b4c13b9cb5124bdd12501cf1f16106bbc16d32e4b88496dde77f230839310f108f9548f760b039b829c9c0cbc72a8a0dedc5d3ff0e9f21a8e91de64751662aa63319b27f07c0fc4d7cad99de2a85098902099bba755cf1107e0e9d1f099c45ce19b7d557188ca98a8b1f9cb3475054f9cc7a435f693aa113a7b7142296185f0b18261dbcedfe1bda819026323b474ea836502737a7d253a595f93be628263c418ce79eee5c98959da7599f625fc39da8acbc02b8463e572e28ffbdee742924c34131273b92befecbe9391a31b4f8a54e1cbc59101f5cf8bf0b64a75df5cd29213fb7398f4889c3e9539cfe415b2138a22e5630814eabcff44668051af219fe1d227ac86ee50f08bdd1b0309afc675e1ed22250f75712936d48adff425f8082290e42dc09504034e04becf7270b4e3cbb65dc151737d420136648d72f3b801081d5cf1eeff05e5fe3d4d91216d78dd830734631ec3acae854e8bed46b678acf13e98e88a5391b6522713d2724151942fbd9861806cc561f949c03198537eeeca1f3a7723e83be7063a328d766951a4bd5f58237fc07de7dd9135a0c264dbfb341fd2f093144692b75db2379a1f5a2a524a9a03e047c4ec3e41bb7521799403fa8e091cbc910b67534c5620c96eb0653d85f9cf8b9ee7e78406a0b24bcbfc67088843695c7bd7595139ec24e25921e61b88d33b2d8593868c09bc19ea3d7684e097477735777c701d8460e4cbff657d7f23a01280d1b377a215fe3837c82e4226c9aec2c9e1af50e9977af5602cabbdacc388295b7134a74129d3005035516914ac257de0f746bb1da6197daf0fe90cba3961feb1911e9b05ab905b4ec5def558d01aed2f70e76980aa505b0c5dc7e3690712c633139cff95c91944560552439d291227d78c6f61e496e5ccee0bfb1ecca67c79680ddb5576981996028ccbfc08eefa7f14fccf41bfa86ad3836bb5738b55b98e97e9e3579a9746832833e3b70ceec8ef7568115c94f03b87aa967ee4a0c1333f13503c1ca2cebe984a2bf4a117bfe7d59d6a80a58f9e0803d5ff3fe6eb6d8bb6e3daa012b2b1ccaa8665bde6fee902c121f60eec6002a2b23fe776510eab5773fb985cee52ac803ecb0e91b2b1923513ccabc09f3635a7a15387528224f28e3fc4beb13b419fe1efd4bcff3ed0a836201de40d723c7af8b7150349db8bf90f2e92cbb445ff83276a2dd0afcbdee2e6e7ec0282a97921ae990a153bc0e37af52a63a09a1d3e0b8a45800465ea744d34d25c3816ea0353988cb40ae81ef9faeb639b54ce7098492458c0a60c033b29986b796df3d993c32a3a047a6a4f043c521943c0aa55904b95b189fc18a6b2243d43e1299f367fad6ab9c57ac81375a44f485c3bca0ba55421d3da28854803db3956284e374257d55b34029cd0b10070e266951a525e36c53fcb68b1fa7406bd5d1ecb2a6d586f65e966c9e190103199ede208e5e24c2d1c77c32bd4ea71df17c813040700af3ba9cc49ad7c74ce37ab61c0b2b39245a6d6e7f26d50ee5a0b675bebba9b1803742dc4c449f6a31ac7a4e364a5b06a9a7cf894e3f48c872973d37044a50e3bd1ca6067f369924e2eee7ef466b99f7924bf775ae6613858618a913dbf0b13f183b5b900ea712cc211adfd76904490df5814d654e9c20674fccb1f78cc5be110eb17b1c7d368a9b2c63d9d2749fc9709f984231f7800e370c21f1e2a818a2b2a2b00e1a6a20e50df81aec4ea71577e28350099f2c1be18bd653c87cc27d5cb9cafa28b2110ded54751ef8054a16403a4aedb706b5dc1cd99d8a0faf0f662655c1106a099c2361e2486c9bf4cf507af8207f0b6e8119aad989cfff989624b1a42773d68a3215aaab88b331256db634124a27ef9421675a11d8b8e1e80fe2a335822e3afdabdf2ad37d9c7961e3fc65baecbb441d84a2a07dda104c965055ab49dcb9c1eabd4ca6bdd95d4ca466cdd01fd8e7d4a9e3301fb45ffc12492c011793faf5a6619ae6db4bb7d5318d1017dbd4e322397a9d5a7706a93b9e41d947551031bd20c", 0x1000, 0x7, 0x0, 0x1, r8}]) recvmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000380)=""/246, 0xf6}, {&(0x7f0000000500)=""/221, 0xdd}], 0x4, &(0x7f00000016c0)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x60}, 0x40010060) dup3(r8, r10, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:56:47 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x26, 0x2400) 14:56:47 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x8}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:56:47 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:56:47 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup3(r0, r1, 0x0) 14:57:02 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="0888413100f2f501c6bbd0b18e475e7a2408112ab5d1c3c4182a89275f27"]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:57:02 executing program 5: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r0, 0x1, 0x6, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @local}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000040)={@rand_addr, 0x0}, &(0x7f0000000080)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r4, 0x1, 0x6, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r5, 0x1, 0x6, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r6, 0x1, 0x6, @local}, 0x10) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f00000000c0)={0x3a8, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r0}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6b28}}}]}}, {{0x8, 0x1, r2}, {0x214, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}]}, 0x3a8}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r7, 0x4, 0x400) fcntl$getown(r7, 0x9) 14:57:02 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:57:02 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup3(r0, r1, 0x0) 14:57:02 executing program 7: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$FITRIM(r1, 0xc020662a, &(0x7f0000000080)={0x0, 0xfff7fffffffffff7}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, 0x0) perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x9, 0x3f, 0xff, 0x1f, 0x0, 0x5, 0x56080, 0xb, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x800, 0x0, @perf_bp={&(0x7f00000002c0), 0xe}, 0x100, 0x9, 0xff, 0x8, 0x4, 0x6, 0xfffd, 0x0, 0x100, 0x0, 0x5}, 0x0, 0x7, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r2, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f0000000400)=ANY=[@ANYBLOB="1e2f85a3233d75ec0bad699584cd9d2b5a2543e076953a9f39f09095d882869f394c9db8dcf8f95bc298b452197d2ce782b5027b88629a04a831376d7f00000000000000"]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r3 = openat(r2, &(0x7f00000000c0)='./file0\x00', 0x109400, 0x8) finit_module(r0, &(0x7f0000000080)='[@\x00', 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r3) sendmsg$nl_generic(r3, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f0010000350020002bbd7000fbdbdf250e0000007f1467f083f6733555d2661ff219d3e0f170d7328587f24663109d893eb3c4a300fa75191f62e79c2de47bd454a112a8fe22367698536986e8514573dbd889c67c02dc82e8ac3fa202d6d8f49a4b8b69b11620a2d1e9661851625b917eab5248ee3dbc3f739e5ee138bbce023f60739ed0739b95785bac47dce59ba71c2dc649c8fd950c7517b13ac5c873ed6f1a539131f33dbb0dcd82cd495febe337f0124b1df218eb67e87b768e982f81e5b1619373ebfde41bbc99ec3aa3d519af434fc4561709c553f8882db43e348b363d8062410fd00378428c988030327a600aedce01589c2c21c7a3955fff4b343636d75e03eecae64b617404393286faa9ec8ffa9da2a378e2ab899ebf3cbbeed4090a2018d2fcf416625e3c0e0b3480ccf20787a25e9bb8f373fd66142487d31e64f046b67c5212f044cb96cb0c1d08bdfd3fcc6fdae82ddba5998991466ef38e3f98dc23e38b566f9bff9203b33e6300fa5b3aa5b61d68a79a6d9518ba0de7f69c2c5204cc94c3a7496e46f529e7d4aef39f5633dd22ca1473657ec04de7d4fd0028258074f1bbed6fbe8f56cf25052d14ac6b298a1c265f05bb649752101c2fe932e52d21004c80f201123b647eeef0fe44c83ba60fd297664babf00eae14809e7009801d00"/496], 0x1f0}, 0x1, 0x0, 0x0, 0x10}, 0x4010) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) fdatasync(0xffffffffffffffff) r4 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:57:02 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x402, 0x2400) 14:57:02 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0xc}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:57:02 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) syz_io_uring_submit(r2, r0, &(0x7f0000000780)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r1, 0x0, &(0x7f0000000740)={&(0x7f0000000140), 0x80, &(0x7f0000000600)=[{&(0x7f0000000040)=""/8, 0x8}, {&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/168, 0xa8}, {&(0x7f0000000400)=""/80, 0x50}, {&(0x7f0000000500)=""/223, 0xdf}], 0x5, &(0x7f0000000680)=""/129, 0x81}, 0x0, 0x140}, 0x7fff) 14:57:02 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x406, 0x2400) 14:57:02 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000100)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYBLOB="ddb5f9bfa559fa73539c3d8f431bec0959e4f30538e56b9239a86837ef1a5fed382f16c947c4d4438e59978d3799572577730757e564bcc03b739eff4bad57ca93b7b76b53662af44e8de147fe1a78e4c9eb0d05c41c1823eb001f29188def9f3490814ea55539c405adf37da4aa2b4c7bdda8f09ead445016e8b637542acbb158fd2f3abab83101df09abcd24291e8eb3697f541964eba13c5ed3a9d2b899d6086f36587ccb7e949c13bbbfc9232b16ae620a11f9fbf728e7a33f4cfabffe521a68b1aaa75558df0115e5c3f51ec2ae767a92fae930d82c1e3d488965d087cca856a7e5a7b63f253962d26c66f861ae6fe9"]) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r8, 0x4, 0x2400) fcntl$setstatus(r8, 0x4, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000600)={"9e8c925ac12bd335743085881a5442da", 0x0, 0x0, {0x4, 0x1}, {0x10001}, 0x7fff, [0x0, 0x0, 0x4bd3, 0x9, 0x9, 0x10000, 0x4, 0x7fff, 0x3, 0x5, 0x7fffffff, 0x6, 0x81, 0x5, 0x793d, 0x2]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000001e00)={r7, 0x20, 0x1, [0x4, 0x3, 0x20000000000000, 0x9, 0xff], [0x2, 0x3, 0x4000000000000, 0x800, 0x4, 0x0, 0x9, 0xffffffffffffffff, 0x20adab71, 0x7f, 0x5, 0xdcb0, 0x3, 0x5, 0x1f, 0x40, 0x8, 0x8001, 0x400, 0x9, 0x9a, 0x8, 0x0, 0x0, 0x3, 0x6, 0x3ff, 0x0, 0x5, 0x70000000000000, 0x1, 0x3f, 0x0, 0x80000000, 0x2, 0xf68b, 0x1000, 0x2, 0x1000, 0x0, 0x0, 0x40, 0x40, 0x213, 0x5, 0x1f, 0x1, 0xa1f0, 0x3e, 0x1, 0xfff, 0x0, 0x1, 0x8, 0x1, 0xff, 0x1, 0x421, 0xd911, 0xfff, 0x40, 0x4, 0x1, 0xb5c3, 0x4, 0x8, 0x8, 0x4, 0x6, 0x2, 0x59, 0x6, 0xf586, 0x16f, 0x2, 0x4, 0x1, 0x6, 0x1ff, 0x3, 0x4, 0x800, 0x6, 0x1, 0x80000001, 0x10000, 0x100, 0x4, 0x1, 0xc8, 0x9, 0x100, 0x5014dc49, 0x8, 0x0, 0xb4, 0x2, 0x2, 0x3cf4, 0x999d, 0xfffffffffffffffd, 0xfffffffffffff267, 0x45, 0x0, 0xed, 0x1, 0xe98, 0x9, 0x7ff, 0x9, 0x7, 0x2, 0x0, 0x1f, 0x3, 0xffffffff, 0x2, 0x100000001, 0x5, 0x0, 0xfffffffeffffffff]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r8, 0x5000943f, &(0x7f0000002240)={{r2}, r9, 0x0, @unused=[0x7, 0x8, 0x7, 0x4e2], @devid=r10}) io_uring_enter(r2, 0x6980, 0xe22b, 0x2, &(0x7f0000000180)={[0x4]}, 0x8) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500e62d00cfc5ccfee79b9b403725fdec0c000009000000140000000001ffffff000000000420aa80ca105965500000ffff0002ffffffff000008000900000000000000ea54ffff2100c1714bfd768f9af0aba381ddd23ee4038dfe5a2255739cce14c2becc470a51a38921a2b1efa1a7b0dd8bb94746b695395ebdcd3f694dfa921000000000000000f7e44f51005936066147a605ff5cb008eb0da835e9226cac864b377453165fb6723d7370cc864cb760fc2700"/214]}, @devid=r6}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) 14:57:02 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x14}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:57:02 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000140)={0x8000, 0x8, 0x5, 0xfff, 0x2, "f845c8b04da98198"}) fcntl$setstatus(r0, 0x4, 0x2400) write(0xffffffffffffffff, &(0x7f00000017c0)="80893f6f80a974bd760ba5abe9beeecde086573dae0c4addf2abf0911857124b888bdc5157068ffeae", 0x29) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000580)={0x3, 0x0, 0x1, 0xf, 0x18d, &(0x7f0000000180)}) fcntl$setstatus(r1, 0x4, 0x2400) fcntl$setstatus(r1, 0x4, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/65}) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) fcntl$getown(r0, 0x9) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000005c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000007c0)={0x0, r2, "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", "c66562909e8e04bf8e029a86421a0547dee816367cb9ec9328832789e42aeaac4244e26864e2d3db7668352cca61f296883adcab8abb7b6254a3fcd3011dadbc25b5e0f7ae43ce1b9c2b1cfe1360abe996e00debea1ad94399fc737d542c6a30b416c54f15a41cab9d98b5928076670961e8eff3a245aecb6b34e0073015701cf32eefe9af40c8dbbe687ca530444c4f5c9de1a7cb80ff4c91d5f2d2960102ea542e682ed03e0fc66a376ba832fad19f71a396c3c0265d3e75ddc807d2e539914316845ff2a6615af3db71cbcaf8fac2047dc0585ecafbdbea5cc906723ef3c3f63cd9ce50fad5302033827eacfa94ee4d8009503048e73cc9a2ed19e14d1f2a7656dfa78017c96414858388d99e803c01b611aa457cadd8270a77f4eb9e925cede0fa492163d9469b36b8ec0b7b3263c5fbac3a21620a72a68a130afb2bd51eaec51d2b7c6885d84fe0cd4fd3ffcdf8bed2b6e061d62ea635a08429073104d4f58297096ba9e8fb456c0dfbbe217c1e5e9a5cf278136d32e8455087d591c9baacd7fd767bd77c0804ce61321429b0d1f48bf080c52e46ad58f4a3fa64f6ef7cb680635a6d06fcbf06803e980ecce15ce89ae81ba2703eaeae6d318a3300bef738303769e9c9a5acd757978a45bd17499ae5440fce8080fb76e90fdcdf3790b09b07521b3ce520d3107312de67697352504ca78f6aba023954c58b66bac800977e2d327a9e05474f87846a8bf6354ff8b48c3ff600752ceeacd3c1fd48b86aa166d5fb66b0d6b00a9a662967951f01ed13973ce220b62ea94d6e002093bacefd427746612dbd628a11c7269979d8f9aa653b998c9ce5bb9906c8c82d2c9fe3945e2162556e6595bca8d027c7440d79e2bd0cb813c3583c117e6cf6f226a8cebe624103c1d44cefe39a1d721be9c82752f589838832f739d1ab01a26250c1e6d586d4829fc4934ae2d975f2b75a0fe0855dc46c4e74464a95bb7afd93c579fd9573aeeafebfbe1bdb4764ffb1019a0920e02823d9af989510e1b75ec79fb6d90a788acff44f965b3e64f28e3f202b86ec4d7dae1d9b3c32b2a80346a8df6a54c781b97b77ce7a816c71c06ebe618b68723b14f0f2a0fc43bd2d4f8c3c7130c6920f38ec329c62cf1fca1d9e8bf6427b6e1e262d5a31abb29b66636c9ca689e2f829ed668ddcf6e74edccfecad1b28a81c7d4bc876a915f92c2dffe007e79802700144e319a36549d01e8951a1cbaddce54b6fcba7d21b3dbdc720c51265d76966c2b756da769c9ed7473758016d580c93b90e7b2423dfbe966dae286e46bee6d61712b400f0b7d088b1795076621dbaa5a83db5e375f23a7f835e9efae85ee4d507f4cdd8f75d419002c975bbb541975c30cfa062112df1042197ecd543cb55b6f7dd9e9fb02ba099df42e973f15087cd96680a95229544b33207ecf2360fa83d6db1d71c2498fc3832e79c5475c0c63d626ad41de80d2930daa34aa1be2083a0a2727edabc45a81a14c4dad2fa887a61785447bbb21c5d4508d9f97ec386f3167671426940527ec30e7942d40619db3344d17dd147df303b136836a7761bbf2649b0c6667bf16480b1978ad73c3691b6fc413be38ecf54f6a3e0879959364e43ba46d67b7e8225d823f0885a3167c47dfefe997690a545ec454857ecbc3c554e0bff70a9e2866acf5d9447a24640694b12b19e50e5ac51d6517aa67d1646b119c60a9223480aaee250aa26e3076241a1e1c0089030346fc0fdf9bc9b6483fffa9d349175ae00118c2293b2d59d6a1d4a3f7b66d096e9fd4c9b82a53a35d8260ea21807ce296d781e2825bf470216950501d9004b626f2eb7b32f7b61cd73563aeb4c6894dc04e87094da544b3cc84063c9c64b2d73515689d2728c7a88d393f2eb484897520e5bc13897191aaa49734093258fdda6720427c65421213e5ae15decbf494b4cc84ba1fb82269832de8efa3b3aa36662bfae91d03dd4fc0703c8a1efe973d7455eef1f14426c7ddcd4a56d6ae8a10827301e8c3c908c2ee3145fee6a658b766c77f322bc32f572156458d39ad3761abfdbb397ce3e9b2f3a48b06a90f6ca41b62f7c6f5fa31c722af22bfc8892b2643f86c8760315bd8cba71c80458379b7f2dcf0bb6f756fb2af47017b9091959b4556c967e3a4b01f9948341355df47c56886672afc5ebf80857f07dce4c57fb7dc063edfc7dc71fa8a6e6eb9cfacfb2f7a9a4ff318129eb30a265cf860a8bae7ac2cd09090781af9816927f38406765fb5914eb36ccbce67eca10a1295bf6dd6b2d97c28ec925894f2a5287e0f26b41b376a2ab360f63a997e2059743c7c1dd315875f825444623e5b9b57f306cb9145fac0bdac256aa10ce84816541f537a426f4a3a4f8f80ec02f04cfeb1bdeac52e15aa6f32c057e659248bf47a3bfe736d3559cb3078af3d96c8ed48ba283603af20b235c642f5915d865ccffadabcbd959110a261f50e73d76a87836e6435f0d30e7655eeb668b70eff37eefc702f2ae2c2473bb51fe4f43b7664abf22b97ac33b3bbf3cf41282ed4739fdcf53e6fb446102d93dc4296c680e4e090944d9de7b44886f463da6a3ab270ae788cd5d0360e22b1864fd2a3dc44fb3a2606dbb9b015c7ad3592b9dba564c0333dcbfb4a738fce5566086b872f61b57f11f444263c406d8a5b5ebb3896c8c66bf5888baf2b6a422a45a5f668ac4770a383f828f3055ba3541e58dff999160aef91848f7b8e787b00395ac35e32498a2187451893dcef6354f65dd8f12296a7977107f406d8af8545fceba8127a0a4ed291d33630833829ba13eaf8ab18b0c4a1ccfc6dc26c79db1b9b52ca204551ddc2e6def961fa21fb800293a62bc64194a4de6a0cee467356105f29b7cf3ba5403526c592c8e691ba318957884f4c2581bbf1d59f62f948217ef570a32aeb12890e9675f49b13cfa917f499d6745de92017a0691d68b43bbcb50e54953642f6599d3ebe105f8828db137ce5c532568b9bfcb5b6987145056c8115294779eb3eacf44683ab330fdc06358052671b07a4d0bd5bf6b9b3ee08569c5a133b3d3311272525c52586cea604822d6db8851bb67dcdabf490e3daa18873e4bed0eae31a8f22d3259af5db4419b9b3961691b62efa84342cf4766a8fb8df7dd2f02196253bd005803ea8221009aff96dd1d2abe82a9856ce5f541398cf894c683f5ae9744c1c94d3c80f08674a98c7c0cd7b2d2da9f426f62263a4696c35df8224922eb68e93669c44c20c6c2db5432f719e18602144bf62b416361bfb75720206b5d60512da661a1ba3121a0a674538664488717f59096132a230b4d05b79f9984a4bb860b37604af1e4bc2b212a3c4cd5c45322e3889aeed3b324a7016d89cdac96dcce047eee14e34a508b160505651665e6ede79f974f35f892009aa11c2f92dabfc8571419984a178269f5af0348d65efb3bfafa1fb955b84f1678ad1f00194da16e093c477ae4109925ebe16ae8a765fb34dccfece700e8599a97fc21f2d35f37b9e0c78784320c6d81a043e391b86fa5c812158913f5a12644a5f45ffc68e1a2c9bbe907fb154bfb6fcdde21c61c870e453eda1144f5677836773e39b1effb4b74f21393f9a0f4317be6283a8834728d65e0f9b6aa32d6191a21a90eb41eb985732c317f5a3475e6fd60f607aad2f769ab6dfd6d3dc882cfd3595ba0f68aba656345627f2d32cd43c34e2ef20155e8be06d4f1d82e2e58191d3113c5b9408f18577450e2c67d3dcec8c096e50dc26eeef88d22d8e44478cd677b6d103814c88d77d74ffee10072f2237fe33e8475706dc1425da6ef248dd34ebadbf956ad05c3940ee6db24b2d846004d470973258206603a65a6ce8f346762363d76e2865b50cb784509a017fea9bdf29d2293a34dad428ea03323c21392d64642769665e981181a6e68e17fe0016e677bd0e74e23487ea37a331639c06383ae19cb30754e3000737134c1a1a9a813d1b19fa2cd51ebf3b835e3db5f48efbf73c4583ca297c54a6538fda02c54d7b31ab7872bdfdd3b2ff89816749b6d01de912779fc58693c2b74bb39ed2d4ef6785fd66877a95d9405a5b5c5a5677964062147513b234151a73d3db6244ff41af472630bde9ac6912ca26b7b2429defc8620e0b7506a23c01c9eefc39316651873dbcff474809bdf82076e6229050bc0f7da1e7dc22931f778f9a2a797d3e1b9f478f628ce1b0028a71da8d4afd7d680476dd615b50902500adf28798919dfc07d673ca38c476d49386a10943f98a9ff435e0fcdb56e62160457a7397d3b457c87864a8b4df560257c133a28bd9acef67a1c877cea34f09252bbebf51827d3e54e651901739570830cd0605835aafb434010f3a37302050bcbbb40b915e8ccca9003575610ab485fd860ee4bf34153987ca879b4ef0d81a7f71800942cbf97ddcfbcb3ed968467ae7b0686002e55a6846eb699885773f4d2871939ae659a99f54b2f5ccf86aeb1a631a1f3e7e8fb680e3c9e80172a98203abd5e21c5af990fdc5c7c278b8947d4ce2e190c2c8c15e53972cf7cc57e2ee6ff25e5879b95f748cf0e26cd1fd2abe837cb6ad1d1d6f0ecfeea083eb0685d33589df7ff6f51eca69f40de52e3d724f8fade2cb80dbe02e6473beb7774b755d5e4208768f294b18bcc7e269c944226db235862fe975d0b0e9436627fa13853b9f53362ef5eda96e0cf44c125faa16c3a51ccb761b9854c8e361c8cdbfb87cfe63bfb51d900703353b936de338746c1af47996cef647c297aa311d37aeebbfa2d607a46c8d0cbd343c2fff87960031356004a714b16ceec221b8be888e363e4b46821ec3a48a2d8fdb9561f563b55a95fe88abcfc150eae8a59680f8799721d73fc0c6a9e94143cd21c29f325acf707d45032567596611d9bee6e83f524e4f2830043e953f95ada0c5d994837f46edbc3eca5daab2d030e5b4ff05578084314fd90750920f621cb0be1714e131d4b2fef60fb0873249830e82cbf2196a24efbe41599cdf04b23231a59230adfecf5523457ec8eea92f7a07183a79da35fbd731d541cfb09966a3fc4030c2d8a4ebc397b6012dc379e36b116283c1ad6db04a4bd4530f431ebd2650d0b9e592f6843f5181ea50ce619991a32961845abe8f5a9d7b49f41a56c9fc2a6012a5b5ec7e31b1faa74b46f866a9acabdde87746494f3a5a8bb3567633da1d27180a5e9fb79d367c038814570f29e1c3eca4ac3c93e5ab42ba4cb7612fddb781a5cc0659845ba7d4b5cfbb692d567d54fc5a2a814b978afcb6833eba155f9fa6baa21718ca84ba1fe06cae9814e005f7a1432d08f6863ae4b05de8910c79c03a67f4d25feb6f4bb2f3168f109f18ada477ff2663db56b69adbf1dce23bda80d45a8e7ac1fea23c9122ea5fa7c60"}) 14:57:02 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x22200, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000180)=[r6], 0x1) 14:57:02 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000140)=ANY=[@ANYBLOB="92e82b66735c37bf32f4bf2d7d8fc94d3024e7624a570b6a344e4d7560ee890f0de9f22d1f8d27e546e049480fffe8a7199777a70c3087f3a77c54877f649a7089164ede7eb65f5bc73c4eb8e9c463c4680eec4e75325edc321ca63577689b7b222947b0a8bcc6b756256acd6dea5f22c2a29b76bcae7437a71d49646a637438a5571c91fc278031d525f2db86e398eaa2f84ce1000000000000"]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:57:17 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x407, 0x2400) 14:57:17 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1d, &(0x7f0000000100), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0xfc292a8c574ae91a}, 0x0) r5 = openat(0xffffffffffffffff, 0x0, 0x2d3242, 0x84) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd, 0x1, {}, 0xd68, 0x0, 0x0, {0x0, r6, r5}}, 0x1) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0x6, 0x5, 0x0, 0x3, 0x2, 0x0, {0x0, r6}}, 0xbe5) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:57:17 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:57:17 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a73, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB='S}p\x00\x00\x00\x00']) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r2}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r3, 0x4, 0x2400) fcntl$setstatus(r3, 0x4, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000005eb40)={0x0, 0x0, "c2a82d07fe92c7944a4f9a51f96ac50b053ce087781010a12892c84397f02ba66ba53516bffe0ba526cfdc1dc5fa79631b4fe11dd1e3c186e2ac54e3bf0ad08acc15c0a815cc86395a4ea39d6fa087c1893978894c2a31ee257aee6efc2a93ee8b978af03a38e626143bb42951c0f765306f9b9b5f4a8634c304f8b5657fd385aa4df899729af0daf9447f9d6bee7812090126f4891ba799e7670df854a5f26959633b5fe3feb2cb97234dc280d5a4e4f59a8a34a53246cb85b6f518ce44e7b115fc893bb998015240114bdb1985ef9ed6d2f7ad1c062c15ac969932533d593977bb6172336784abdb5d5fcf9174fdf84155c53eb7b6909bae9acccb6f9c5409", "578a308526dcdc1c3c34ebc3f4a528550edbf36a80214344bb2a89c8706d12cc59b2d2cb34fc3fd72ba1758df6eab210359256eb2fd90eb2d6b416975c68fb8ab99ac3e7bf2b7d891601dbd491da9586358c43e0589435d136cd2cbcba303ccb007f97a40db286f6d4ccf8a855739d42a1d8b9d87bcb81be6718ea666a0462587c409834b9285eadb6aa77cc0b650017bc42c74c68bec5e7edc07802be34dbc40106e80003d60ef05710571db9e4b6bc33d719cb8a149970374b580d0c99320f7890aaa69a3028ce2540748589f444a8bf446b250f12802376a832d0a2d9ef6644ba94a4eb7be925ecf7f90381ad420ef4b50a6dd0dfa452376b7e2eed6ecf46945265636b92cd183f6d994ca052c283f029090f2ddf4b890169ad5da7d61c28f8673c1b3cfd3d76067463823f703234673dce7da9076ab88ece20ea089b8b7d02c75accf411d5782d9fc33919e9c590d9007183958cad845b20054c9739089d85c854d82ba72e87caa19338c2f611c443109039cca07bca8dc4f89f13fba8b402a0e35eff4ba79e8361924e82bae57f2960011e16657d426dc07b01982126a82d89c900a6b66263568d47398cf7ad65112b38d6257ec47dec82a346a9506ea7f76bbe40dfc5c8c3c1f842be3e7c35cd6ec217de699f29dd33a513fa2fd7edde1b5935461f53911e8f642045daa4ffe4ef5f622d8b5389e17a92ea635ce5e9a1f1f267d504f42c67d30c10622387f903ecc79930e92187e5e784544a629ddbfe3d892a5b503f2a27a287584c3479ceca44ff9451c7d39770c943cd9dfafad2a467cfc279590666394903cc182c5e60c935b858f57a8fdea0e7caf3ccdf7a741c1a0986985f71a8e9b846e4f9f1bf8f16787832d4fa6febeab2546903a6d4c36a7616dcc4350c77a66b0351ee8ac60bde46588c12370efd7e5399f9eeb67d459f19ec47c14994ef944348950ddc2da75b3570692195dc88983083490269c9c2aee5a9d04589ac749849e52af9ba4793107fb044390b60842fdbab5eadc2a0d4b10e06f6d107c84ddf88aa721f5f2fefaa20e2a69e04e53b7ede0767df79b66800ead86066049a43e1f1d2afa44713a11c790bbdf1e99d6563b22b1a1dfc56967194966d346111efad265b09de3fa7469b43a8af396ed062a1cfd558fa2524e01384d8a37fcdb1f88468c3474e4b3c09c659713c9258fe589ea5c832b986fca4f41c9a1cc38848a71d0e8017941ea2fd64452319b378abfba95265a48bd00ee7887eb4946fd237e5f25e15d6a974d8092aa8459486cca0c406758cee5a8915430da5a12480240d862b1d17d212d87b0e1e9f8b70dd4df7184ab548952c47e4ca2d24894995c8c364533ac3bc0bf87b8d06be75e29ce50477025d41843ef562fb95b0630e4484b3ff07916efae067a720fd1210250d36840abaa004ab0a4085d81c34e9e34c556648920c2640f3d6261b7a2c23ae85e4c8173063941858f4b6ba9888384b9cb7b261265bf5e9589931230434ab74d6d48bef22523a5639b62d8561f478eece8d00eff205f01a329e2508d072e6062fd2579272165326a33434defbb9c147408785662baab52b554080ff90bcb6cb05e50f2e8fa163ca7a31f9a03aee6f7f69f2a3d39e31abb2d9059fd82b8712065c4269a8af352cb3d1a3467c70f96abeed8c33d90e0a41a41bb8eadf78c6fe979f1003ad6df510e3b28c4c9828282624d04ff5e1d091994286ebd6fb43a6575e4304b4ae16a7a4c762e0bbe6041d9b3a17a95dabe305ae300e04004042ee3c764652823153a18b5cb15ead463aea5ad16fa225194e0336118738e7e10d8d9e0b7829ddff78165529aabc98d40123fc683831596061158e8ed29f87c63a49cd7157fd3be13cd2baa3acf96de2320b2b7c7b9f216b78ccc459b568a5d7a6439b17f3b3c97fcef96ccf94e80725f3a8d34c0aca16388444c5f76db6d551580676b231deece91857c4d227acd6f1932629ea2d17d5bc54ebab420a217794e4e39da9ed3a5544a37489a5d7fde5b25d042b92d30d3aed10727d7bfe0dad0dd6e236fd17ece5d17fd73cfa2b175ddffc13e2c11fe8b820bced0da501558ab1dd4c41d99c7b4a9f343636241395d25e79f73ac6307be9a60c2c7e4d3b3beae68e4ab12107b76e64206ff409ba24480ee6e313bd9b53d9ad4f6a749e342c6ccbe6c65b371f66ba70ce979862586c03150596d633d33c8d303a3bd26121254a9f937705994e3ca85bbea29acc83359b1d769d5711f60bfc4373aacc9b0a531a6bf5423039b300aadc0b7c78cf993b41c20b9026e86c5afb5b8bf53960a6bb04815216575831d3e1479b195d1eeb23716ed99052136ae33f13450e411d6c58d0db263e9b00bfb806f70f8f41e4f837a7d8895cd26c37ed2a484a948fbb44fc06b525440b5a652a9fad03639920af33eca8c6972977859d52117c3502923bab16ed9bb2dfe8a72e1647c21fb887d7fbf6c59f4dccabcc404fe9d0dfe90f29b26dfee68cfd96089a2399dc38df4ff182b75ae0f9099fae3b917c6e62130fc1a404c1d5e47bb3cd9e0146a2604d262b81c495f40cea2b8614488b0267da1f4e2f6746bb5cf41a3788eaa4d8de033542dd0c4fbc2fb21d42ace78b616cd2a9d08376de0bb3149e64783d50e4fe077ef9b89a55564f14a0dbd819f9df418eff08811d4e4faa9b9f11495a7471e11ee41c3f8f05a44e7f8f8a8b34425d29a730be73eaabb7a602aa10a5c57ce5ffb1ed17da3b02e751bb16a0e0237ec4d4e8f74d9d0f4e1c2473c520006df941b66423a34c22f95df89116247b6223f1c95a06d7858444af3d4a5b5571866b684108293e119caa14c49d0cff7ceb6b336e62c3a94f90daa83df7bae62284f25d5985c10d0e64cb03111ed1a44387330c59b3de5d9e908e3d16f6208b930d1054ab5d3e271f8301d4b7a69a9b85bfbe34b0054f7cb532a2e236e687a7d1b47dc2388bedb4218ee13df5232595212ef6d0562b3f702cc39b996e51bad5b01008fb55768cce19925cc21f71aff23d268cbb589d3cab6683801bb18733079549e79178a4e76b0b9623e526dd6edb9f7a94b04342400a67de237daae7cdcb33e7f2e5f7f62a655a9161490fb8f8b60de93827b29abc4131453045188a6e174abc2efb3ca482338f601bde430ce01f1c5bf8ee7b170adea7ce740fb550c2e906c2fe3d4fe8462a49f35dd40150b43e9585cb79aa5f74810eedc3e9afc55cc40674fbfa74535afa50281a377aa92ea8106bcf86ec15cabe13c48a0f0f6c83fc43f18b96a57a631149465626678d7bbddda48a46563e98ea3d0c1fb3b3a04ec9b2cd81deed37dc4b737bd1efaee1b3c7f6bb855dab48b5a02220746d3b8c2cbfb9ba0b2fb0a61cc12887a394a20dfff5662d7f6b0e653731d3da67413dd23e4ef483c9ec097fc8bd70fc788c06dd0e484f204b4e6b98f216d352527fda4114f7c5435272b378851d16b69b5230c72a7ab3bf485fb8a1c7aedb389d145dae1c71f35ecd372e309474db869c8059b8654730439c70893cac0451ddafc579e21e297990cdd90d5f34496ead73c38e44db4e1d491f28e47fa6b914f4ab04d6ac615a03116acb2b98764ebc11d414a4c6653de78539d0e36ca0f70a9e443eab40c92e1509ac85ea10b916e00c2282a02590ff5f67e255f1ab52e8958df69471c2e3ed44490dcb4e7f7daa86e821e451c0a0cab51e00f040b0e02bdb4d230fe668c7d64ce818dfe26c56c405ee23858b0c306f47ecc665e38f03bb52b6c4ba8ac398930277812bc84d8c56b5d4af1fe8d76ec40db2b879f258fc7df012deae738d84dffdcce284da594d14a4b48f47a3ffd63626bc14a99ef2e8b1e1b15009a4ea9cda8bbcba9ed5456fe04138fabc860da05997801926d46bdbfbf85ba14e078dbffb9018d4151571a8b79a74c3d6a2e8bdbda40e40111c4d6a9b28912b1dab5c100e350f2e171e0fe4004b753ebbbccf626f433c381d65e7d9a894ed56ec9f12ddaffa16817674669f2f57257c874b8b5fe68a0df8289df4ef61e4551bd7d3630e97c25da4323d37d69bdcf361f7e4250178720fc2b72bc3018c984ad1d0a9ae84a63fb01975439aab3153f5859eb81511d8411b6f05f4ad2a69888ffd33f10f087460d3836bdf46a04d02a8dd2c48068176378cbdd76a6137ca63d48863c036a020918f90a5b0cfa46ff8c1028d8f26557a9a82298ecd90fa70341921cbd4cfbf8ff031ebc550bbb410388445f216a3df03070a27c8040c7643baa87a378fc45b94dd606d22a59c284bf770e8a72b15d50e1bdc6740ad08877b09edf49d17b7df8201f781f48aa16b8052c3e45be4d5d6c4cd7e6ee7b9e5bdc038e88a9c6ad94056cd1174674efa5cb42e316db0a5045a0ef396870bb2216af00d07ebf6696ab5d97658e70588d13e5d0f5819aa1caeb12be0e18589b1e3f1ea9088f737a44680058adddaed50a212be9d6c5e75970eeb6c2c7881fde1e492b6d0983430de824426e1eda15916aec40b76ab129d58820e67dc43287517322e36daf83d4eee2bf3c5bf44580c57e70bbeb284b8d9236001563f917fd05691fa80bd1cd1e9f657fca163b3620cfa2354ff5e589fadd8053e077cb796ce54547606c7fd3fd0b6af36e27a8936f01690632c176ac8630efd89694795da5f7ba21a185ed61f5b35aff5d2dbfe614299fb1c2c2f9934979deeed053e16a01fe673524c32a3cc894681b06180881d432c29c5fef833a410aa0a32d8d6e63749d22af55510d07f753d64ffea26c8ac9c7c5bd90565d0de8dde272859e8b7690353f26d66ef3a75c5062cbde63b0ff9a49895e43c60cf43b40606b5c442c3fa40d5294aa7abf459fd8875bee582adeef6638114eadb4c1f80bc3e68ce33d9163e4e050fa9619282e5016619d0c5817565aceecd0a293bf02274f0a466d482fc84cf5973a30883556187a80740075807c26b02c24e7542bb8afe07303dbdd2b957ba258ddd8f5b8b91bce0799fda00237615f5a178afa42987d737266e6f3861a0514d5bc7009fcd8899af1e1af8d73b8a2e1f1113da6063ae818a2a9055058d2ed2936b5045516509665d7dde372adbf1db9b848bd17796e32d2684b86ca8502150a36c80a7736a33d5059f0f394309dde6fa76ecc5f978ab8a12731bc78e085aa403d7e3f2596ef545bdaa2a5069abf3a4be73bf29d4965a9bdcf08b65aaf6b28956551d24ea6bad8e475d82d6b62a493a31de78d819a4ff02e283b27c09b8a117cd7221f2c64389eb7118df271bdf9e108c631e017a3c9f94b292fab24b0a27499ed95e9221739468f4f52f43af704c26e217111067f9ed70721433b98855e8a6fdb892e6aa739a0c422e112b5f2ccf057e300388a1f9e314cb4855e303753aa8432b7b71ecf318"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005fb40)={0x401, [{}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x1, "4cb878f1e99b05"}) ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000001e00)={r5, 0x9}) 14:57:17 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000100)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYBLOB="ddb5f9bfa559fa73539c3d8f431bec0959e4f30538e56b9239a86837ef1a5fed382f16c947c4d4438e59978d3799572577730757e564bcc03b739eff4bad57ca93b7b76b53662af44e8de147fe1a78e4c9eb0d05c41c1823eb001f29188def9f3490814ea55539c405adf37da4aa2b4c7bdda8f09ead445016e8b637542acbb158fd2f3abab83101df09abcd24291e8eb3697f541964eba13c5ed3a9d2b899d6086f36587ccb7e949c13bbbfc9232b16ae620a11f9fbf728e7a33f4cfabffe521a68b1aaa75558df0115e5c3f51ec2ae767a92fae930d82c1e3d488965d087cca856a7e5a7b63f253962d26c66f861ae6fe9"]) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r8, 0x4, 0x2400) fcntl$setstatus(r8, 0x4, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000600)={"9e8c925ac12bd335743085881a5442da", 0x0, 0x0, {0x4, 0x1}, {0x10001}, 0x7fff, [0x0, 0x0, 0x4bd3, 0x9, 0x9, 0x10000, 0x4, 0x7fff, 0x3, 0x5, 0x7fffffff, 0x6, 0x81, 0x5, 0x793d, 0x2]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000001e00)={r7, 0x20, 0x1, [0x4, 0x3, 0x20000000000000, 0x9, 0xff], [0x2, 0x3, 0x4000000000000, 0x800, 0x4, 0x0, 0x9, 0xffffffffffffffff, 0x20adab71, 0x7f, 0x5, 0xdcb0, 0x3, 0x5, 0x1f, 0x40, 0x8, 0x8001, 0x400, 0x9, 0x9a, 0x8, 0x0, 0x0, 0x3, 0x6, 0x3ff, 0x0, 0x5, 0x70000000000000, 0x1, 0x3f, 0x0, 0x80000000, 0x2, 0xf68b, 0x1000, 0x2, 0x1000, 0x0, 0x0, 0x40, 0x40, 0x213, 0x5, 0x1f, 0x1, 0xa1f0, 0x3e, 0x1, 0xfff, 0x0, 0x1, 0x8, 0x1, 0xff, 0x1, 0x421, 0xd911, 0xfff, 0x40, 0x4, 0x1, 0xb5c3, 0x4, 0x8, 0x8, 0x4, 0x6, 0x2, 0x59, 0x6, 0xf586, 0x16f, 0x2, 0x4, 0x1, 0x6, 0x1ff, 0x3, 0x4, 0x800, 0x6, 0x1, 0x80000001, 0x10000, 0x100, 0x4, 0x1, 0xc8, 0x9, 0x100, 0x5014dc49, 0x8, 0x0, 0xb4, 0x2, 0x2, 0x3cf4, 0x999d, 0xfffffffffffffffd, 0xfffffffffffff267, 0x45, 0x0, 0xed, 0x1, 0xe98, 0x9, 0x7ff, 0x9, 0x7, 0x2, 0x0, 0x1f, 0x3, 0xffffffff, 0x2, 0x100000001, 0x5, 0x0, 0xfffffffeffffffff]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r8, 0x5000943f, &(0x7f0000002240)={{r2}, r9, 0x0, @unused=[0x7, 0x8, 0x7, 0x4e2], @devid=r10}) io_uring_enter(r2, 0x6980, 0xe22b, 0x2, &(0x7f0000000180)={[0x4]}, 0x8) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500e62d00cfc5ccfee79b9b403725fdec0c000009000000140000000001ffffff000000000420aa80ca105965500000ffff0002ffffffff000008000900000000000000ea54ffff2100c1714bfd768f9af0aba381ddd23ee4038dfe5a2255739cce14c2becc470a51a38921a2b1efa1a7b0dd8bb94746b695395ebdcd3f694dfa921000000000000000f7e44f51005936066147a605ff5cb008eb0da835e9226cac864b377453165fb6723d7370cc864cb760fc2700"/214]}, @devid=r6}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) 14:57:17 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = getpgrp(0xffffffffffffffff) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000000)=r2) ioctl$KDSKBLED(r1, 0x4b65, 0x9) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x9) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r3, 0x4, 0x2400) fcntl$setstatus(r3, 0x4, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xf501, 0x0) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000080)) 14:57:17 executing program 7: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time\x00') dup2(r0, r2) pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r3 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:57:17 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x22}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:57:17 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x408, 0x2400) 14:57:17 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x1e0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:57:17 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) syz_open_dev$mouse(&(0x7f0000000000), 0x5, 0xa000) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) fcntl$getown(r1, 0x9) 14:57:18 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x3, 0xff, 0x0, 0x4307, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext, 0xc0, 0x0, 0xffff, 0x8, 0x1, 0xc0000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000040)=ANY=[@ANYBLOB="5cf401c1fabccdd8c583341b79b59753664d988d9b035fd6cd"]) sendmsg$nl_generic(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000001d00)={0x1464, 0x27, 0x200, 0x70bd2d, 0x25dfdbfc, {0x16}, [@nested={0x324, 0x54, 0x0, 0x1, [@typed={0x15, 0x20, 0x0, 0x0, @binary="d24eb29fb35d8451c1fbb0229fdee2cf09"}, @typed={0x14, 0xc, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0x4, 0xc}, @generic="3d79b7a1aadb385fa2236b75e274f1075e0442b18499c71335cfaa4a96ed0a06f8ccd8ea5eee5f96191540ff9ad4a43e96fb2c3c076a76857cce3e1f4c4bee33eba83d71268e46e01247b51e7259c29e2be8cb67f44f9a485a8964cc3d817e70983eb9ae1c683d79d4ab4fe4fed31c6220f35f7468a95b4eb5032bf691532f76f9d493cb2856e83483bd305cdf072035a225bddcffdce92ee422739fe665ee4eb08cbcc9440970c0a7d0059dd925b8a9701bf6ba7a1cdd65ab95604fca45bdf154704b8eae3da817ea40", @typed={0x8, 0x2e, 0x0, 0x0, @pid}, @typed={0x14, 0x14, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @generic="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", @generic="cc15fb1278380ba61dc611c174982a2283c85ad7dd3c3eea3d135c0b4cf0eeb261f184377c0cb472a378df87f4239daef9f9592d89be419510f76a5fe3034492a3a40588884fc297fb294a705b7ad5a6623b9dfa88e7fa85acd8582bb2d43a575000990f9667adb2413e7ef18607d63869f632306e72a75cd1eaadf8b75ebddc66d255ea28ecf2badd3f9ee75b5c21ace28b02da853694c5adf93d6c1a", @generic="2770685a9819a3c1bc00b6ab3bf21fac35add96ecfad772da0ec1489d8321a2f596ebbf064c73c99a464db3a6f3be0f39b5722ec8bc3f7b4a6b665d985611086a0b956255bcff9f7d6e6eb6d322f13e6203c1459a844f58e80227ceee5632075afb20feef7b0c4626bc648b8632059bd"]}, @typed={0x8, 0x62, 0x0, 0x0, @u32=0xf369}, @nested={0x3b, 0x7c, 0x0, 0x1, [@typed={0xc, 0x57, 0x0, 0x0, @u64=0x4010000000000000}, @generic="9d8a7da588a828ea056fdd", @generic="1527c7e67e1a773d9a1636468ef7915186b36f76d2f47a0454a7cff159a815b2"]}, @generic="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", @nested={0xe0, 0x48, 0x0, 0x1, [@typed={0x8, 0x54, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x96, 0x0, 0x0, @fd=r0}, @generic="0c2a9b086b5417a4c9e9cf1fffc9fae85bf15463843acbbb0b7d8db43411b96042ee47e4081c806cc87fa1a1e09eaa31615b36cae2568cca04a583af53225c5161e9daecc34d19fe82b9c4f2ba1836adc93a3eaa45d0309f74e8b6dd3cef1b460951137a5777538489953ee95e311ee94b0a5245ca5f4f2bb9b7d036b804a2a47d01fc7579a856a36865c12a3edf8840d53b6a9dd30e21e9df5e2edde4907d401e902efbefe1424ac68a722834076f2c511c329786848e1db2111dd7c0e2d1903de64c30722c45ca969715cc"]}, @typed={0x8, 0x27, 0x0, 0x0, @u32=0x8}]}, 0x1464}, 0x1, 0x0, 0x0, 0x4040}, 0x48c0) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:57:18 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x1d, &(0x7f0000000100), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0xfc292a8c574ae91a}, 0x0) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_STATX={0x15, 0x3, 0x0, r3, &(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', 0x40, 0x100}, 0x3) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r4, 0x4, 0x2400) fcntl$setstatus(r4, 0x4, 0x0) r5 = socket(0x2c, 0x3, 0x4) ioctl$BTRFS_IOC_ADD_DEV(r4, 0x5000940a, &(0x7f00000006c0)={{r5}, "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"}) r6 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r7 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r7, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:57:33 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000000)={0x4, 0x3d, 0x6e0c}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x800) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x9) 14:57:33 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r2, &(0x7f0000000240)=""/83, 0x53, 0x200000048) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000340)=0x3) ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r3 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r2, 0x0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000380)=""/234, 0xea}, {&(0x7f0000000500)=""/53, 0x35}, {&(0x7f0000000540)=""/192, 0xc0}, {&(0x7f0000000600)=""/239, 0xef}, {&(0x7f0000001d80)=""/4096, 0x80809c00c1f4992d}, {&(0x7f0000002e00)=""/232, 0xe8}, {&(0x7f0000002f00)=""/102400}], 0x7, &(0x7f0000002d80)=""/118, 0x76}, 0x0, 0x100, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_WRITE={0x17, 0x3, 0x4004, @fd_index=0x5, 0x7fff, &(0x7f00000001c0)="1a0caf7418ee35995c80d4f5fdb3", 0xe, 0x2, 0x1}, 0x9) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000300)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, r2, &(0x7f0000000040)={0x18200, 0x1, 0x1}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r6}}, 0x5) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r8 = openat$cgroup_ro(r2, &(0x7f0000000740)='memory.events\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000001, 0x50, r8, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r7}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) 14:57:33 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r3, 0x4, 0x2400) r4 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) close_range(r4, r3, 0x0) fcntl$setstatus(r3, 0x4, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000040)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:57:33 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x80010, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:57:33 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x1f0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:57:33 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x409, 0x2400) 14:57:33 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0xd3, 0x1, 0x3, 0x87, 0x0, 0x5958, 0xc0082, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x101, 0x2, 0x0, 0x8000, 0x3f, 0x9, 0x0, 0x3, 0x0, 0x1}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="010000000cafc2ac0000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r5}) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) fdatasync(r6) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:57:33 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:57:33 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2000) fcntl$getown(r0, 0x9) 14:57:33 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x40a, 0x2400) 14:57:33 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x2e000}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:57:33 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) recvmmsg$unix(r0, &(0x7f00000008c0)=[{{&(0x7f00000002c0), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000340)=""/134, 0x86}, {&(0x7f0000000400)=""/73, 0x49}, {&(0x7f0000000500)=""/26, 0x1a}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000006c0)=""/242, 0xf2}, {&(0x7f0000000580)=""/28, 0x1c}, {&(0x7f00000005c0)=""/32, 0x20}], 0x3, &(0x7f00000007c0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xf8}}], 0x2, 0x140, &(0x7f0000000940)) ppoll(&(0x7f0000000980)=[{r2, 0x4bc}], 0x1, &(0x7f00000009c0), &(0x7f0000000a00)={[0x3]}, 0x8) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000b00)={0x37, 0x10000, 0x2e19, 0x372, 0xfffff800, 0x83fb}) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000a40), 0x4, 0x602) ioctl$BTRFS_IOC_RM_DEV_V2(r4, 0x5000943a, &(0x7f0000001d00)={{r1}, 0x0, 0x0, @inherit={0x50, &(0x7f0000000a80)={0x1, 0x1, 0x80, 0x1, {0x26, 0x5, 0x8, 0x1, 0x100}, [0x9]}}, @subvolid}) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getown(r5, 0x9) r6 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = io_uring_setup(0x5b2, &(0x7f0000000040)={0x0, 0xbf00, 0x0, 0x2, 0x2d5, 0x0, r3}) syz_io_uring_setup(0x190f, &(0x7f0000000140)={0x0, 0x9cfe, 0x2, 0x0, 0x26, 0x0, r7}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r6, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:57:33 executing program 1: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) r2 = fork() r3 = open_tree(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x9100) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x204, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r3, 0x0) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x5, 0xc0, 0x81, 0x80, 0x0, 0x4, 0x10400, 0x6, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f0000000280), 0xa}, 0x4000, 0x0, 0x7, 0x5, 0x7fffffff, 0x0, 0x7, 0x0, 0x6, 0x0, 0xd7c}, r2, 0xc, r3, 0x1) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x4, 0x9, r2}) clone3(&(0x7f00000005c0)={0x9043c0, &(0x7f0000000080)=0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140), {0x7}, &(0x7f0000000300)=""/189, 0xbd, &(0x7f0000000500)=""/153, &(0x7f0000000180)=[r2, r2], 0x2, {r1}}, 0x58) fcntl$setsig(r4, 0xa, 0x0) r5 = syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r6 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000006c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r6, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:57:33 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r2, &(0x7f0000000240)=""/83, 0x53, 0x200000048) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1d, &(0x7f0000000100), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0xfc292a8c574ae91a}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r1, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r7}}, 0x1000) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:57:33 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x40b, 0x2400) 14:57:33 executing program 5: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x402c00) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) fcntl$setstatus(r0, 0x4, 0x2400) r1 = socket(0xb, 0x6, 0x1000) fcntl$getown(r1, 0x9) 14:57:33 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:57:33 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:57:33 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$FITRIM(r0, 0xc020662a, &(0x7f0000000080)={0x0, 0xfff7fffffffffff7}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, 0x0) io_uring_enter(r0, 0x305d, 0x789e, 0x3, &(0x7f0000000180)={[0x8]}, 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x214042, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r7}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) 14:57:33 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0xc0605345, &(0x7f0000000240)) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:57:33 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x40e, 0x2400) 14:57:34 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001a00210c00000000000000000affff0008000000", @ANYRES32, @ANYBLOB="0c001d8008000000", @ANYRES32, @ANYBLOB], 0x28}}, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x487683, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xa8}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$FITRIM(r2, 0xc020662a, &(0x7f0000000080)={0x0, 0xfff7fffffffffff7}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, 0x0) ioctl$HIDIOCGRAWNAME(r2, 0x80404804, &(0x7f00000002c0)) r3 = signalfd(r1, &(0x7f0000000200)={[0x3]}, 0x8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r4, 0x4, 0x2400) fcntl$setstatus(r4, 0x4, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r3, 0x5000940e, &(0x7f0000001040)={{r4}, "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"}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x0, 0x0) sendmsg$OSF_MSG_REMOVE(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0xbb8, 0x1, 0x5, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [{{0x254, 0x1, {{0x0, 0x1ff}, 0x1, 0x8, 0x9, 0x5, 0x1, 'syz0\x00', "0cfc4cdf0220abe691f86e96287b8a8f3c69e3e2e21ad0d231663d55c15de18a", "c7f843345a3e04ba2a0c94e98a9ff40914cc6428f438df3a2fa70920235a0a8b", [{0x725d, 0x5b, {0x2, 0x4}}, {0xd50, 0xc504, {0x3, 0x8001}}, {0x5, 0xac3a, {0x0, 0x8}}, {0x200, 0x6, {0x1, 0x8}}, {0x81, 0x8, {0x3, 0x3}}, {0x9, 0x3, {0x3, 0x1}}, {0xffff, 0x1, {0x1}}, {0xe, 0x20, {0x1, 0xfffff801}}, {0x35fa, 0x3ff, {0x1, 0x8}}, {0xff, 0x8, {0x3}}, {0x6, 0x1800, {0x1, 0x5}}, {0x3e, 0x7fff, {0xf0b1c845b43da078, 0x3733}}, {0x7f, 0x7fff, {0x2, 0x91}}, {0x8692, 0x8, {0x2, 0xc477}}, {0x5, 0xe85e, {0x1, 0x9}}, {0xffff, 0x6, {0x1, 0x4}}, {0x3, 0x5, {0x3, 0x5}}, {0x85e9, 0x8000, {0x1, 0xfff}}, {0x9, 0x0, {0x1, 0xfffffffa}}, {0x101, 0x3, {0x0, 0xfca}}, {0x20, 0x20, {0x2, 0x5}}, {0x7, 0x7, {0x2, 0x20}}, {0x9, 0xfff, {0x1, 0x7ff}}, {0x0, 0x36, {0x1, 0x3}}, {0x1, 0xfc67, {0x106e783ec8d9ac27, 0x8}}, {0x1, 0x9, {0x0, 0x2}}, {0xc7, 0x2, {0x2, 0x101}}, {0x6, 0x6, {0x2, 0xb438}}, {0xffff, 0x101, {0x1}}, {0x6, 0xf5, {0x3}}, {0x5, 0x9, {0x2, 0x1fbb}}, {0x8001, 0x3, {0x1, 0x4}}, {0xa57b, 0x3, {0x0, 0xffffff09}}, {0x0, 0xffc4, {0x0, 0x1ff}}, {0x2, 0x4, {0x0, 0x10000}}, {0x9, 0x56a3, {0x2, 0x8}}, {0x8000, 0x8, {0x2, 0xffff}}, {0x0, 0x400, {0x1, 0x6}}, {0x1, 0xfffa, {0x0, 0x6b72}}, {0x9, 0xffff, {0x3, 0xfffffffd}}]}}}, {{0x254, 0x1, {{0x3, 0x8}, 0xc1, 0xbe, 0x1ff, 0x8, 0x1e, 'syz0\x00', "02e210da96b4613b0ee084867112bf5140d00f0df758a6a42da97de10c785acb", "3f8d59d3746b6c03af9fb04dc20503df03fd19415c7f186720efac1aeeed827a", [{0x101, 0xe572, {0x2, 0x99a6}}, {0x4, 0x3, {0x3, 0x1}}, {0x4, 0xac0a, {0x3, 0x1}}, {0x400, 0x5, {0x3, 0x5}}, {0x0, 0x40, {0x2, 0x3}}, {0x5, 0x5, {0x3, 0x9}}, {0xc7ed, 0x6, {0x2, 0x1}}, {0x6, 0x4, {0x3, 0x1}}, {0x325, 0x4, {0x3, 0x80000001}}, {0x20, 0x5, {0x2}}, {0x9, 0x1, {0x3, 0x10000}}, {0x7, 0x1, {0x1, 0x5}}, {0x5, 0x9, {0x0, 0x6}}, {0x0, 0x200, {0x2, 0x2}}, {0x1ff, 0x20, {0x2}}, {0x1000, 0x2, {0x2, 0xffff5f22}}, {0x95, 0x6, {0x2, 0x80000000}}, {0x3f, 0x3, {0x0, 0x8}}, {0x200, 0x9, {0x0, 0x7}}, {0xc4f, 0x20, {0x3, 0x1000}}, {0xae, 0x9, {0x1, 0x2}}, {0x1ff, 0x40, {0x3, 0x9}}, {0xd9b9, 0x0, {0x2, 0x6}}, {0xfff8, 0xe2ce, {0x1, 0x7}}, {0x6583, 0x6, {0x0, 0x100}}, {0x9, 0x3, {0x2, 0x1}}, {0x0, 0xff1b, {0x2, 0x6}}, {0x8, 0x401, {0x3, 0xfffffffa}}, {0xdb, 0x9, {0x0, 0xb}}, {0x4bf8, 0x2, {0x1, 0x2}}, {0x1b, 0x1, {0x2}}, {0x6, 0x5, {0x3, 0x5}}, {0x200, 0x4, {0x1, 0x7}}, {0x9, 0x5, {0x3, 0xe0}}, {0x100, 0x1, {0x1}}, {0x9, 0x7fff, {0x1, 0x7f}}, {0x7fff, 0x5, {0x2, 0x36}}, {0x1f, 0x8001, {0x0, 0x9be}}, {0x0, 0x6f2, {0x2, 0x10000}}, {0x80, 0x1, {0x2, 0x3ff}}]}}}, {{0x254, 0x1, {{0x1, 0x1ff}, 0x6, 0x9, 0x4, 0x5e9, 0x28, 'syz1\x00', "04a2eed847742f36b23d707330abfa20bbb250016efb114e623301363fbd35b0", "025e473a89cad858d74a2b386f95a35e7fb0468560a900bbf1d18c2a40bc6291", [{0x2, 0x255, {0x3, 0x4}}, {0xbe, 0xffff, {0x3}}, {0x101, 0x9, {0x1, 0x90}}, {0x9, 0x1, {0x2, 0xb00}}, {0xbf7, 0x4, {0x0, 0x2}}, {0x645, 0x8, {0x0, 0x67d}}, {0x68b, 0x1, {0x1, 0x5}}, {0x4, 0x80, {0x3, 0x4}}, {0x200, 0x9, {0x1, 0x3ff}}, {0x39af, 0x1ff, {0x2}}, {0x8000, 0x6, {0x0, 0x7}}, {0x4, 0xfff, {0x2, 0x5}}, {0x1, 0x5, {0x3, 0x973f}}, {0x9, 0x1, {0x2, 0xd33}}, {0x7, 0x1, {0x2, 0x43a}}, {0x1, 0xa7a, {0x0, 0x80000000}}, {0x4, 0x7ff}, {0x81, 0xb0d6, {0x3, 0x10001}}, {0x0, 0x9, {0x3, 0x34}}, {0x252, 0x20, {0x2, 0xdc7a}}, {0xf001, 0x2, {0x1, 0x2}}, {0x9, 0x8, {0x0, 0x81}}, {0x6, 0x1, {0x0, 0x951}}, {0x1ff, 0x3, {0x1, 0x5}}, {0x1, 0x2, {0x3, 0x31}}, {0x2, 0x6, {0x2, 0x8}}, {0x8000, 0x6, {0x0, 0x1}}, {0x5, 0x0, {0x1, 0xb0}}, {0x7ff, 0x81, {0x2, 0xec3d}}, {0x0, 0xe0, {0x0, 0x6}}, {0x7, 0x8000, {0x2, 0x5}}, {0x200, 0x40, {0x2, 0x80000000}}, {0xa867, 0x8, {0x0, 0x8c}}, {0x1000, 0x8, {0x1, 0x1}}, {0xace8, 0x1, {0x3, 0x80000000}}, {0x8, 0x4, {0x1, 0x10001}}, {0x736b, 0x4, {0x3, 0x8}}, {0xfffa, 0x40, {0x2, 0x322}}, {0x7ff, 0x7f, {0x2, 0x9}}, {0x5, 0x8, {0x1, 0x28000}}]}}}, {{0x254, 0x1, {{0x0, 0x7bf}, 0x1f, 0x0, 0x2, 0x4, 0x1d, 'syz0\x00', "e549bac38d60262303ab587bc91935dd3132b51cae78426bcf5d75863e75ed87", "decb1ca41e66d90bc698fc90b2c8f04840c65a87cae569ffbc2e0fdf8bb1a60b", [{0x7ff, 0x8000, {0x3, 0x4}}, {0x3, 0x100, {0x1, 0xff}}, {0x6, 0x1, {0x0, 0x80}}, {0x2, 0x54dc, {0x2, 0x4975}}, {0x3, 0xff, {0x2, 0xe3}}, {0x2, 0x0, {0x1, 0x7ff}}, {0x9, 0x9, {0x1, 0x10000}}, {0x86, 0x7, {0x2, 0x2}}, {0xdc, 0x3, {0x1, 0x400}}, {0x400, 0x7, {0x2, 0x9ea6}}, {0x78d4, 0x73d0, {0x3, 0x101}}, {0x6, 0x2, {0x1, 0x364}}, {0x2, 0x2, {0x3, 0x8}}, {0x3, 0x6, {0x3}}, {0x80, 0x2, {0x3, 0x9}}, {0x2, 0x2, {0x2, 0x3f}}, {0x9, 0x5, {0x1, 0x4}}, {0x7, 0x2, {0x1, 0x6}}, {0xffff, 0xfa, {0x0, 0x5}}, {0x1000, 0x7, {0x0, 0x9}}, {0x8, 0x2, {0x3, 0x200}}, {0xffff, 0x1f, {0x0, 0x8}}, {0x1, 0x1, {0x3, 0x6bb}}, {0x0, 0x40, {0x0, 0x7cc4}}, {0x0, 0x8, {0x2, 0x8}}, {0x7, 0x100, {0x2, 0xfffffffd}}, {0x2dd6, 0xfd0b, {0x2, 0x10000000}}, {0x6, 0xd8, {0x1, 0x9}}, {0xfff, 0x22, {0x3, 0x68}}, {0x9, 0x3, {0x1, 0xbab}}, {0x5, 0x7, {0x3, 0xfffffffa}}, {0x9, 0x3ff, {0x2, 0x9}}, {0x800, 0x0, {0x0, 0x738f}}, {0x8000, 0x7, {0x0, 0x7bb}}, {0x3, 0x2, {0x0, 0x96}}, {0x3, 0x13, {0x1, 0x8000}}, {0xdb, 0x6, {0x3, 0x1}}, {0x200, 0x8, {0x0, 0x2}}, {0x1, 0x1, {0x3, 0x6efd3c72}}, {0x8, 0x800, {0x1, 0x7}}]}}}, {{0x254, 0x1, {{0x2, 0x6}, 0x5, 0x9, 0x8001, 0x400, 0x20, 'syz0\x00', "341e9c8072959c0a8a083fdc08dfa91d6605d1b631131845bf9e5a68d19cb318", "994efeec12781eed182c3d468a6de5af9ecde735d769a2d7ace1451b34908eb9", [{0x40, 0x3, {0x3, 0x77}}, {0x8, 0x2, {0x3, 0x60000}}, {0x5, 0x3ff, {0x0, 0x8}}, {0x0, 0x1, {0x3, 0x4}}, {0x8, 0x1ff, {0x0, 0x360}}, {0x7, 0x3f, {0x2, 0xffff}}, {0x3, 0x8, {0x0, 0x1}}, {0x3, 0x9, {0x0, 0x10}}, {0x2, 0x8, {0x0, 0x9}}, {0x0, 0x80, {0x3, 0x6}}, {0x9, 0x1, {0x2, 0x1000}}, {0x5cc, 0x1, {0x3}}, {0x5c, 0x3f, {0x2, 0x2}}, {0xed, 0xb95, {0x1, 0x3d}}, {0x5, 0x9800, {0x2, 0x4}}, {0x100, 0x8, {0x1, 0xffff}}, {0x7, 0x81, {0x1, 0x55}}, {0x4, 0x7ff, {0x0, 0x5}}, {0xfffd, 0xe068, {0x0, 0x1f}}, {0xff, 0x24d, {0x1, 0x253}}, {0x0, 0xf4ef, {0x3, 0x5}}, {0x2b3e, 0x3, {0x1, 0x81}}, {0x2, 0x9, {0x0, 0xffff}}, {0x5, 0x1, {0x1, 0x9}}, {0x7, 0x8, {0x1, 0xffff}}, {0x0, 0x81, {0x1}}, {0x3f, 0x1, {0x1, 0x1}}, {0x3, 0x0, {0x3, 0x9}}, {0x9, 0x3, {0x3, 0x3}}, {0x0, 0x819, {0x1, 0x3}}, {0x7, 0xf82, {0x1, 0x2}}, {0x80, 0x9, {0x2, 0x20}}, {0x3, 0x2, {0x0, 0xffff0001}}, {0x0, 0x8001, {0x2, 0xf9}}, {0xb4a, 0x7, {0x2, 0x5}}, {0x8000, 0x4}, {0xf124, 0x80, {0x0, 0x10000}}, {0x8, 0xffaa, {0x1, 0xff}}, {0x8, 0x0, {0x2}}, {0xca39, 0x2, {0x1, 0x7}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x40}, 0x0) 14:57:34 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) [ 2122.551188] netlink: 'syz-executor.5': attribute type 29 has an invalid length. [ 2122.552578] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=13993 comm=syz-executor.5 [ 2122.566336] netlink: 'syz-executor.5': attribute type 29 has an invalid length. [ 2122.568704] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=14014 comm=syz-executor.5 14:57:49 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:57:49 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = fork() r1 = open_tree(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x9100) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x204, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x5, 0xc0, 0x81, 0x80, 0x0, 0x4, 0x10400, 0x6, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f0000000280), 0xa}, 0x4000, 0x0, 0x7, 0x5, 0x7fffffff, 0x0, 0x7, 0x0, 0x6, 0x0, 0xd7c}, r0, 0xc, r1, 0x1) r2 = fork() r3 = open_tree(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x9100) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x204, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r3, 0x0) r4 = syz_open_procfs(r2, &(0x7f0000000180)='attr/prev\x00') ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {0xfffffffb, 0x9}}, './file0\x00'}) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r5, 0x8008f511, &(0x7f0000000140)) pread64(r4, &(0x7f0000000240)=""/83, 0x53, 0x200000048) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r7 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r7, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:57:49 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x4}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:57:49 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:57:49 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)=ANY=[@ANYBLOB="95eafd434f63bd25a4da1ae70b53cc233f6767534044aec63ffd2cf2f856ddb1fed22ef73b0a28868ff63de81f4117d18cea96b43b8aa9aacaf7b3bd5264cd716fb124c5d3c5f85ce16e2b5ce970117f2b4301dc80c2ef0d348b"]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, 0x0) r3 = fork() r4 = open_tree(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x9100) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x204, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r4, 0x0) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x5, 0xc0, 0x81, 0x80, 0x0, 0x4, 0x10400, 0x6, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f0000000280), 0xa}, 0x4000, 0x0, 0x7, 0x5, 0x7fffffff, 0x0, 0x7, 0x0, 0x6, 0x0, 0xd7c}, r3, 0xc, r4, 0x1) r5 = perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x70, 0x6, 0x2, 0x94, 0x0, 0x0, 0x80000, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x401, 0x2, @perf_bp={&(0x7f0000000140), 0x4}, 0x4020a, 0x20, 0x3ff, 0x0, 0x3ff, 0x0, 0x3, 0x0, 0xfffffffc, 0x0, 0x3}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x4, 0x2, 0x8a, 0xb, 0x0, 0x7, 0x39010, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9cd, 0x2, @perf_bp={&(0x7f0000000040), 0x8}, 0x41808, 0x2, 0x4, 0x5, 0xf6b, 0xc, 0x6, 0x0, 0xfff, 0x0, 0x7}, r3, 0x0, r5, 0x8) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:57:49 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0x8001) vmsplice(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="a07ff18ab1ba85766827bee7d6d6a5ef52078f0e1061b0626d841e913c37b25b99ceb703d743fe2c3cc5ca95ed67c6fc1ca75d249da40cde3f141e610e96c5e8460f8360ddb397c62d1d01484c2e376f02acdfc61edc8ac16fdfc2f535ebb5dc829b52b257857dfa9f334fb9f1b9e37b3039670520dbe7741836eed95bffe3c29bae09e0743e8ed1b69824fa5d28b3fcd4ffe8f95fdc53", 0x97}, {&(0x7f00000000c0)="0e87d81bc9d9d916f83311746cc85e67d2afa371256d1ca14381b09f072d6b89dae6de3b80429d6c6623f7d6bfd7f25aa1d19ce664e8985ac781cc28f488521317486310bdd1efdc1b9afd4fb836f4f68d3617f63e8cf510078ed9b06033ed1bfd46dad8a21aa2378e91fdb4e397b5c3dcdbc081c6aae1c5d377b5c694", 0x7d}, {&(0x7f0000000140)="ef2f407c5db59fd6cd745f5cdd", 0xd}], 0x3, 0x8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) fcntl$setstatus(r1, 0x4, 0x2400) 14:57:49 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80004307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x8804, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) r4 = fork() r5 = open_tree(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x9100) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x204, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r5, 0x0) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x5, 0xc0, 0x81, 0x80, 0x0, 0x4, 0x10400, 0x6, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f0000000280), 0xa}, 0x4000, 0x0, 0x7, 0x5, 0x7fffffff, 0x0, 0x7, 0x0, 0x6, 0x0, 0xd7c}, r4, 0xc, r5, 0x1) syz_open_procfs(r4, &(0x7f0000000040)='net/icmp\x00') syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$vcsu(&(0x7f0000000380), 0x80000000, 0xa00) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0xd6, 0x7e, 0x0, 0x6, 0x0, 0x1, 0x11002, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000180), 0x3}, 0x2008, 0x80000001, 0x3, 0x2, 0x4, 0x9, 0x9, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xc, r7, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r6, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc59b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020000000"]}, @devid=r8}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:57:49 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$FITRIM(r1, 0xc020662a, &(0x7f0000000080)={0x0, 0xfff7fffffffffff7}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r2, 0x4, 0x2400) fcntl$setstatus(r2, 0x4, 0x0) sendfile(r0, r2, &(0x7f00000000c0)=0x101, 0x3) getdents64(r1, &(0x7f0000000000)=""/97, 0x61) 14:57:49 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/103) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r3, 0x4, 0x2400) fcntl$setstatus(r3, 0x4, 0x0) ioctl$TIOCL_SETVESABLANK(r3, 0x541c, &(0x7f00000001c0)) fcntl$setstatus(r2, 0x4, 0x2400) fcntl$setstatus(r2, 0x4, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x28, 0x1a, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0xc, 0x1d, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xffffffffffffffff}]}]}, 0x28}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0x5, &(0x7f0000000200)={&(0x7f0000000100)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) fcntl$setstatus(r5, 0x4, 0x40000) 14:57:49 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x2000) fcntl$setstatus(r1, 0x4, 0x40600) fcntl$getown(r0, 0x9) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/timer\x00', 0x0, 0x0) openat$cgroup_devices(r2, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) 14:57:49 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000500)=ANY=[@ANYBLOB="4f51978db9796561dfc8d7ab7a454326c080f3a3c1f9957236aa005cfe1d52771ca60f6306e1d1212826817543fa243fc23036f81e30a6c058b1dd8f3301747a4cf81464f26cb5fca8b56065951f07c8caaab5e19bed50423ebc5f3c3a81b880edafcd9eb1aca28fe267ea806cfdbfbd26356c59eded22ff931579354595465fe4fbb1b8c75307678d2f5053d55b9728a7e1aa8c9d90217e5371602952412aa05ce9958caa36920743a43952d63d92aa"]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb, 0x10010, r0, 0x8000000) syz_io_uring_setup(0x1d, &(0x7f0000000100), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0xfc292a8c574ae91a}, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) syz_io_uring_submit(r2, r4, &(0x7f0000000400)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r5, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=@rc={0x1f, @none}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/235, 0xeb}], 0x1, &(0x7f0000000140)=""/181, 0xb5}, 0x0, 0x8001, 0x1, {0x3}}, 0x6) r6 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r6, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:57:49 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x5}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) [ 2138.179061] netlink: 'syz-executor.3': attribute type 29 has an invalid length. 14:57:49 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/103) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r3, 0x4, 0x2400) fcntl$setstatus(r3, 0x4, 0x0) ioctl$TIOCL_SETVESABLANK(r3, 0x541c, &(0x7f00000001c0)) fcntl$setstatus(r2, 0x4, 0x2400) fcntl$setstatus(r2, 0x4, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x28, 0x1a, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0xc, 0x1d, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xffffffffffffffff}]}]}, 0x28}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0x5, &(0x7f0000000200)={&(0x7f0000000100)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) fcntl$setstatus(r5, 0x4, 0x40000) 14:57:49 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000080)) fcntl$setstatus(r0, 0x4, 0x2400) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x2, 0x3fe, 0x100, 0x0, 0xcf}) fcntl$getown(r0, 0x9) 14:57:49 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r1, 0x4, 0x2400) fcntl$setstatus(r1, 0x4, 0x0) fcntl$setstatus(r1, 0x4, 0x0) fcntl$getflags(r0, 0x401) 14:57:49 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x6}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) [ 2138.342618] netlink: 'syz-executor.1': attribute type 29 has an invalid length. 14:58:07 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(r0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:58:07 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x8}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:58:07 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r5}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r6, 0x4, 0x2400) fcntl$setstatus(r6, 0x4, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x3, 0x7}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:58:07 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r1, 0x4, 0x2400) fcntl$setstatus(r1, 0x4, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) 14:58:07 executing program 7: ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000140)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000180)=ANY=[@ANYBLOB="cd7245a8d52e8e7f230e74dc9da6e41e33fd1fa0514998d8cd7f53733eff26d884c3ef31d719e2604783fc2ec27e9ce8ee6db54c50cd3675d7b4d9d805372e65b3eb79dda8b7d9b7"]) r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = dup(r1) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000006c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000080), 0x2, 0x200) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f00000000c0)) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:58:07 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/103) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r3, 0x4, 0x2400) fcntl$setstatus(r3, 0x4, 0x0) ioctl$TIOCL_SETVESABLANK(r3, 0x541c, &(0x7f00000001c0)) fcntl$setstatus(r2, 0x4, 0x2400) fcntl$setstatus(r2, 0x4, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x28, 0x1a, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0xc, 0x1d, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xffffffffffffffff}]}]}, 0x28}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0x5, &(0x7f0000000200)={&(0x7f0000000100)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) fcntl$setstatus(r5, 0x4, 0x40000) 14:58:07 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x9) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000040)={0x3, 0x0, {0x3, 0x1, 0x3, 0x2, 0x9a8}}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x6, @local, 0x1}, 0x1c) 14:58:07 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) [ 2155.878307] netlink: 'syz-executor.1': attribute type 29 has an invalid length. 14:58:07 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4800) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) 14:58:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/103) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r3, 0x4, 0x2400) fcntl$setstatus(r3, 0x4, 0x0) ioctl$TIOCL_SETVESABLANK(r3, 0x541c, &(0x7f00000001c0)) fcntl$setstatus(r2, 0x4, 0x2400) fcntl$setstatus(r2, 0x4, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x28, 0x1a, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0xc, 0x1d, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xffffffffffffffff}]}]}, 0x28}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0x5, &(0x7f0000000200)={&(0x7f0000000100)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) fcntl$setstatus(r5, 0x4, 0x40000) 14:58:23 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:58:23 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x64100, 0x3c) syz_open_dev$tty1(0xc, 0x4, 0x1) 14:58:23 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000ac0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x143440, 0x80) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:58:23 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x2, 0xc}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:58:23 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x40c00) fcntl$getown(r0, 0x9) 14:58:23 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r1 = getpgrp(0xffffffffffffffff) r2 = signalfd(r0, &(0x7f00000002c0)={[0x9]}, 0x8) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x9, 0xf8, 0x8, 0x1, 0x0, 0xf614, 0x10, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x1}, 0x8000, 0x8d, 0x200, 0x8, 0x6, 0x6, 0x1, 0x0, 0xffff8000, 0x0, 0xb5a}, r1, 0x3, r2, 0xb) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r3, &(0x7f0000000240)=""/83, 0x53, 0x200000048) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:58:23 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x21010, r0, 0x8000000) r6 = syz_io_uring_setup(0x2670, &(0x7f0000000300)={0x0, 0xdcf, 0x1, 0x0, 0x1ff}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(r5, r7, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, {0x80}}, 0x4) syz_io_uring_setup(0x6816, &(0x7f00000003c0)={0x0, 0x8ac0, 0x0, 0x0, 0x47, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000001900)) syz_io_uring_submit(r8, r7, &(0x7f0000001940)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x12345}, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000000500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r9}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) [ 2171.662552] netlink: 'syz-executor.1': attribute type 29 has an invalid length. 14:58:23 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r1, 0x4, 0x2400) fcntl$setstatus(r1, 0x4, 0x0) ftruncate(r1, 0x42e) fcntl$setstatus(r0, 0x4, 0x2400) 14:58:23 executing program 4: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x7, 0x13, r1, 0x8000000) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') r3 = fork() r4 = open_tree(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x9100) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x204, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r4, 0x0) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x5, 0xc0, 0x81, 0x80, 0x0, 0x4, 0x10400, 0x6, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f0000000280), 0xa}, 0x4000, 0x0, 0x7, 0x5, 0x7fffffff, 0x0, 0x7, 0x0, 0x6, 0x0, 0xd7c}, r3, 0xc, r4, 0x1) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x20, 0x5, 0x80, 0x0, 0xffffffff80000001, 0x4133, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7fffffff, 0x4, @perf_config_ext={0x4, 0x7}, 0x0, 0x6, 0x8, 0x3, 0x5, 0x4, 0x0, 0x0, 0x9, 0x0, 0x8}, r3, 0x4, r1, 0x2) pread64(r2, &(0x7f0000000240)=""/83, 0x53, 0x200000048) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x40000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x11, r6, 0x8000000) r7 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r7, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:58:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/103) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r3, 0x4, 0x2400) fcntl$setstatus(r3, 0x4, 0x0) ioctl$TIOCL_SETVESABLANK(r3, 0x541c, &(0x7f00000001c0)) fcntl$setstatus(r2, 0x4, 0x2400) fcntl$setstatus(r2, 0x4, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x28, 0x1a, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0xc, 0x1d, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xffffffffffffffff}]}]}, 0x28}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0x5, &(0x7f0000000200)={&(0x7f0000000100)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 14:58:23 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$FITRIM(r2, 0xc020662a, &(0x7f0000000080)={0x0, 0xfff7fffffffffff7}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x1f, 0x20, 0x1, 0x0, 0x1, 0x48008, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0xfffffffffffffffd, 0x8}, 0x440, 0x7f, 0x3, 0x3, 0xffffffff, 0x8, 0x5, 0x0, 0x7, 0x0, 0x3975c000000}, r1, 0xb, r2, 0x3) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r3 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f00000006c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:58:23 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r1, 0x4, 0x2400) fcntl$setstatus(r1, 0x4, 0x0) fcntl$getown(r1, 0x9) [ 2171.768910] netlink: 'syz-executor.1': attribute type 29 has an invalid length. 14:58:23 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x10}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:58:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r1, 0x4, 0x2400) 14:58:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/103) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r2, 0x4, 0x2400) fcntl$setstatus(r2, 0x4, 0x0) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f00000001c0)) fcntl$setstatus(r1, 0x4, 0x2400) fcntl$setstatus(r1, 0x4, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x28, 0x1a, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0xc, 0x1d, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xffffffffffffffff}]}]}, 0x28}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0x5, &(0x7f0000000200)={&(0x7f0000000100)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 14:58:23 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) [ 2171.900314] netlink: 'syz-executor.1': attribute type 29 has an invalid length. 14:58:23 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:58:23 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x7) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x18100, 0x0) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000001140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001100)={&(0x7f0000000080)={0x1060, 0x0, 0x5, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [{{0x254, 0x1, {{0x3, 0x800}, 0x2, 0xff, 0x2, 0x8, 0x11, 'syz1\x00', "00b54a4fdf4850a502f6c654b4746d0aa07bac840bf071ca3b84bd13b4ff9fc0", "b5868a69010063bf723d95475c9224f3e01be1577a18a5fc787655443d6b236b", [{0xff, 0xff00, {0x1, 0x800}}, {0x1ff, 0x9, {0x2, 0x5}}, {0xb8, 0x91d5, {0x1, 0x2}}, {0x6, 0x7, {0x3, 0xff}}, {0x8001, 0x1}, {0xff, 0x3, {0x3, 0x48}}, {0x100, 0x2, {0x2}}, {0x7, 0x1ff, {0x2, 0x784b}}, {0x20, 0x8, {0x0, 0x5}}, {0xe4fd, 0xff, {0x0, 0x1}}, {0x1ff, 0x0, {0x1, 0xc895}}, {0x1ff, 0x4, {0x1, 0x4}}, {0x400, 0x43f7, {0x2, 0x4}}, {0x7, 0x3, {0x2, 0x4}}, {0x6, 0x0, {0x1, 0x6}}, {0xfff, 0x900, {0x1, 0x200}}, {0xffff, 0x1f, {0x2, 0x783}}, {0x8, 0x800, {0x1}}, {0x4, 0x401, {0x0, 0x5edb}}, {0xffff, 0x7, {0x3, 0x6}}, {0x8, 0x2, {0x7, 0xd6a}}, {0x3f, 0xc405, {0x3, 0x10000}}, {0x7, 0xffe1, {0x1, 0x57}}, {0xb4, 0x3, {0x0, 0x1}}, {0xfff9, 0x7, {0x0, 0x8}}, {0xfe01, 0x9, {0x1}}, {0xb34, 0x5, {0x0, 0x1000}}, {0xc2, 0xfff, {0x2, 0xa94}}, {0xff00, 0x5, {0x1, 0x3}}, {0x2, 0x3f, {0x0, 0x3}}, {0xc4, 0x7fff, {0x1, 0x6}}, {0x968b, 0x6, {0x2}}, {0x4, 0x816, {0x1}}, {0x9, 0x2de4, {0x2, 0x31e5}}, {0x7, 0xfffa, {0x1, 0x4}}, {0xe44, 0x5768, {0x0, 0x7}}, {0xfe00, 0xe380, {0x3, 0x3}}, {0xd60f, 0x80, {0x3, 0xffff}}, {0x6, 0x100, {0x2, 0x6}}, {0xffff, 0x3ff, {0x0, 0xfff}}]}}}, {{0x254, 0x1, {{0x2, 0x1}, 0x7, 0xff, 0x10c, 0x1, 0x1a, 'syz0\x00', "0ae691c47677ed8edd91043771fc37571bc4377c3efe389b65fa91182f7565b7", "3ee6ae5132f82ea2b0bb1043d92682cde9273077a7a2663ee3ec061b054da076", [{0x6, 0x6, {0x0, 0x10001}}, {0x9, 0x7c0, {0x0, 0x1}}, {0x5, 0x3f, {0x2, 0x9}}, {0x2, 0x6, {0x0, 0x8000}}, {0x7, 0x6, {0x2, 0xc1}}, {0x6, 0x1, {0x1, 0xbf}}, {0x7f, 0x5, {0x0, 0x3ff}}, {0xfff, 0x7, {0x3, 0x2}}, {0xc1, 0x3, {0x1, 0x92}}, {0x6, 0x101, {0x0, 0x1}}, {0x7, 0x7fff}, {0xf801, 0x71, {0x1, 0x8}}, {0x1, 0x100, {0x1, 0x9}}, {0x101, 0x8001, {0x2, 0x2}}, {0x0, 0x3, {0x0, 0xb0}}, {0x6, 0xb9b4, {0x0, 0x3}}, {0xfff7, 0x7f, {0x0, 0x100}}, {0x7, 0x2, {0x3, 0x9}}, {0x81, 0x2, {0x3, 0xa0000000}}, {0xd7d, 0x200, {0x0, 0x8}}, {0x1, 0x5, {0x0, 0x51d7}}, {0xffff, 0x7fff, {0x0, 0x60373fd}}, {0x3b3, 0x7ff, {0x0, 0x8}}, {0x2, 0x1, {0x2, 0x7fffffff}}, {0x101, 0x6, {0x3, 0x9}}, {0x7f, 0x2, {0x2, 0x7fffffff}}, {0x4, 0x26, {0x3, 0x8}}, {0x89a, 0x0, {0x0, 0x8000}}, {0x8000, 0xd5ea, {0x3, 0x3}}, {0x9, 0x6, {0x2, 0x4}}, {0x6, 0x532, {0x2, 0x38}}, {0xc30, 0x8000, {0x0, 0x40}}, {0x1, 0x36b1, {0x2, 0x81}}, {0xbc, 0x6, {0x2, 0xe05}}, {0x5, 0x5, {0x1, 0x6}}, {0x40, 0x8000, {0x3, 0x5}}, {0x5d1b, 0x4, {0x1, 0xffffffff}}, {0x9, 0x139e, {0x0, 0x6}}, {0x8001, 0x7fff}, {0xfe01, 0x0, {0x0, 0x6}}]}}}, {{0x254, 0x1, {{0x2, 0x80000000}, 0x20, 0x0, 0x8, 0x81, 0x3, 'syz0\x00', "3207c8c529d470ffde8413494cac03acc31a42e4b2999c43fbfbbe8df67f0e65", "0fd54637f254c0b5c871ab1e0b0fadc220e62148c430a2ffe4120703084ccae7", [{0x7, 0x9, {0x0, 0x10001}}, {0x980, 0x3, {0x2}}, {0x7, 0x101, {0x0, 0x81}}, {0x4, 0x3, {0x3, 0x8}}, {0x3ff, 0xece9, {0x1, 0x7}}, {0x2, 0x6, {0x0, 0x1ffc0}}, {0xfff7, 0x3, {0x0, 0x6e42}}, {0x4, 0x771, {0x2, 0x387d95fd}}, {0x1, 0x40, {0x0, 0x9}}, {0x8, 0x1, {0x0, 0x3}}, {0x81, 0x4c7, {0x3, 0xfffffffd}}, {0x19a, 0x3, {0x0, 0x8}}, {0x1, 0x9, {0x3, 0x9}}, {0x4, 0x1, {0x3, 0x8}}, {0xff2b, 0x20, {0x0, 0x4}}, {0x3, 0x3, {0x3, 0x1}}, {0x1, 0x53, {0x1, 0x1}}, {0x6, 0x6, {0x0, 0x6}}, {0x4, 0x3f, {0x0, 0x1}}, {0x3, 0x0, {0x0, 0x6}}, {0x6, 0x5, {0x3, 0x1}}, {0x0, 0x1, {0x0, 0x4}}, {0x18, 0xd86, {0x1, 0x6}}, {0x6, 0x1ac8, {0x1, 0x3}}, {0x1, 0x100, {0x1, 0x583e}}, {0x7359, 0x3, {0x0, 0x3}}, {0x6b1, 0x9, {0x1}}, {0x8, 0xd562, {0x1, 0x7}}, {0xc5, 0x5, {0x0, 0x9}}, {0x7fff, 0xeb89, {0x0, 0x1}}, {0x4, 0x7fff, {0x3, 0x9}}, {0x0, 0x1, {0x3, 0x8}}, {0x3, 0x2, {0x4, 0x6}}, {0x1ff, 0x7, {0x0, 0x5}}, {0x0, 0x1276, {0x3, 0x3}}, {0xee3, 0x7ff, {0x3, 0x8}}, {0x2, 0x3f, {0x2, 0x6c}}, {0x401, 0x3ff, {0x3, 0xffffff53}}, {0xfffe, 0x9, {0x1, 0xff}}, {0x3, 0x2, {0x3, 0x7}}]}}}, {{0x254, 0x1, {{}, 0x52, 0x7, 0xce63, 0xcf74, 0x11, 'syz0\x00', "10fdd029497aae89db3f780789da36a00267e3e9a96726c470dadb5b21a17e11", "fbc24f35c5555d7de5c3e1c4c09de5c3a8750d499520222a7338d05319c85514", [{0xbc, 0xa307, {0x1, 0x1}}, {0x3, 0x6, {0x3, 0xa61c}}, {0x1, 0x2, {0x1, 0x4}}, {0x1, 0x8, {0x2, 0xe5}}, {0xe08, 0x0, {0x3, 0x1}}, {0x6, 0x5ddb, {0x2, 0x5}}, {0x7, 0x8, {0x2, 0x8}}, {0x100, 0x31, {0x2, 0x1}}, {0x101, 0x570, {0x1, 0x7ff}}, {0x8, 0x6a5, {0x3, 0x1ff}}, {0x1, 0x1, {0x2, 0x7f}}, {0x2e8, 0x147b, {0x0, 0x5bf}}, {0x7e8, 0x20, {0x3, 0x9}}, {0x3, 0x855, {0x3, 0x6}}, {0xffff, 0xfff7, {0x1, 0x1000}}, {0x9, 0x8, {0x0, 0x4}}, {0x90f9, 0x8, {0x1, 0xfffffffe}}, {0x6, 0x0, {0x2, 0x7}}, {0x401, 0x5, {0x0, 0xfffffffd}}, {0x3f, 0x20, {0x1, 0x7b33}}, {0xffff, 0x5, {0x3}}, {0xb21f, 0xc056, {0x2, 0x6}}, {0xa3, 0x8, {0x1, 0x9}}, {0x4, 0x5fb, {0x0, 0x6}}, {0x7, 0x2, {0x2, 0x3f}}, {0x1, 0xb9c, {0x1, 0x20}}, {0x2, 0x2, {0x2, 0x101}}, {0x1000, 0x39, {0x3, 0xb7}}, {0xffc0, 0x9, {0x1, 0x6}}, {0x4, 0x8, {0x3, 0x7}}, {0xffc1, 0x1, {0x0, 0xc9e0}}, {0x0, 0xe379, {0x2, 0x7}}, {0xfffc, 0x3, {0x3, 0x81}}, {0x81, 0x3, {0x0, 0x1000}}, {0x6, 0x1b, {0x3, 0x7}}, {0x8, 0x1ff, {0x1, 0x8}}, {0x9, 0x8001, {0x1, 0x6}}, {0x140, 0x800, {0x2, 0x4}}, {0x3, 0x8000, {0x3, 0x6}}, {0x1, 0x101, {0x2, 0x20}}]}}}, {{0x254, 0x1, {{0x2, 0x2}, 0x9, 0x3, 0x5, 0x5, 0x26, 'syz1\x00', "66f6e20bce5bf12366846b70ee4a3ad0cb20168e66c7ce5e6f1d7f64009202ea", "5d6d74e9ddc950285c068d2987d47ec49d7b36c86ef3d4f2978e02de59f36fee", [{0x80, 0xffc0, {0x0, 0x5cb5}}, {0x9, 0x2, {0x2, 0x6}}, {0xd05, 0x2, {0x3, 0x4}}, {0x428f, 0x8, {0x0, 0x1000}}, {0x81, 0x200, {0x3, 0x3ff}}, {0x400, 0xffff, {0x3, 0x2ba9}}, {0x5, 0xb93, {0x1, 0x1000000}}, {0x4, 0x4, {0x3, 0x4}}, {0x8b, 0x2, {0x3, 0x81}}, {0x9, 0xfffa, {0x2, 0x40}}, {0x5, 0x3, {0x0, 0x80000000}}, {0x1, 0x400, {0x0, 0x9}}, {0x60e, 0x200, {0x2, 0x4}}, {0x0, 0x3, {0x3, 0x8a}}, {0x2, 0x4, {0x3, 0x400}}, {0x100, 0x0, {0x2, 0x2}}, {0x6d, 0xa1, {0x2, 0x10000}}, {0x7, 0x8a, {0x3, 0x2}}, {0x200, 0x0, {0x3, 0x401}}, {0x3f2, 0xffff, {0x0, 0x7}}, {0x5, 0x1000, {0x1, 0x3}}, {0x3, 0x7, {0x2, 0x2}}, {0x6, 0x8, {0x2, 0x7}}, {0x0, 0x6, {0x1}}, {0x1, 0x401, {0x3, 0x5b}}, {0x8000, 0x8, {0x2, 0x80}}, {0x9, 0x5, {0x3, 0x8}}, {0x1, 0x0, {0x3, 0xd15d}}, {0x1, 0x1, {0x2, 0x9}}, {0x6e, 0x5, {0x3, 0x7}}, {0xff, 0x3, {0x3, 0x400}}, {0x2, 0xfff, {0x0, 0xfff}}, {0xf085, 0x7ff, {0x2, 0xf5b}}, {0x89, 0x3, {0x2, 0x6}}, {0xf001, 0xff, {0x3, 0x9}}, {0x7f, 0x3, {0x0, 0x9}}, {0x6, 0x93, {0x1, 0x9}}, {0x3, 0xc05f, {0x0, 0x3ff}}, {0x9, 0xfff7, {0x3, 0xbf4}}, {0x0, 0x5, {0x0, 0x7}}]}}}, {{0x254, 0x1, {{0x1, 0x3}, 0xfd, 0x3, 0x1, 0xfffd, 0x8, 'syz0\x00', "147270f34e36e5d126dc62821731e8109c8566aa59ef72277347392657a8ebd5", "20abb83c50ff688140a2d9e48c375b8df42bbd31b696f8a7a015c78f5c4ae1e3", [{0x9, 0x401, {0x3, 0x4}}, {0x9, 0x80, {0x1, 0x9}}, {0x2, 0x3, {0x2, 0x517}}, {0x5, 0x2000, {0x2, 0x6}}, {0x200, 0x2dd, {0x2, 0x40}}, {0x0, 0x7, {0x1, 0x800}}, {0x3, 0x81, {0x2, 0x6}}, {0x3, 0x8000, {0x2, 0x8001}}, {0x1000, 0x1, {0x0, 0x1}}, {0x95d, 0x6ada, {0x1, 0x8}}, {0x101, 0x2, {0x2, 0x2}}, {0xfffa, 0x3, {0x3, 0xaec5}}, {0x7, 0x0, {0x0, 0xbeef}}, {0x8, 0x9, {0x2, 0xde}}, {0x8, 0x8, {0x4d18b4797b23bade, 0x20}}, {0xffff, 0x3ff, {0x2, 0x7fff}}, {0xc79, 0x2, {0x3, 0x400}}, {0x2, 0x8, {0x1, 0x6bd}}, {0x48, 0x2, {0x0, 0x5}}, {0x0, 0x0, {0x2, 0x6b5}}, {0x2, 0x1ff, {0x3, 0x1bba4b85}}, {0x5400, 0x1, {0x0, 0x973}}, {0x80, 0x3f, {0x2, 0x800}}, {0x8, 0x3, {0x0, 0x2}}, {0x9, 0x56f0, {0x0, 0x2}}, {0x1, 0x8, {0x1, 0x1}}, {0x197a, 0x7, {0x1, 0x1}}, {0x0, 0x1b, {0x2, 0x1}}, {0x7, 0x80, {0x2be0fc595f2de4b3, 0x8}}, {0x9, 0xd9, {0x0, 0x7f}}, {0x3, 0xbc8, {0x2, 0x1}}, {0x7491, 0xffff, {0x3, 0x2}}, {0xb352, 0x1f, {0x2, 0xcb}}, {0x200, 0x2c, {0x3, 0xfd46}}, {0x7f, 0x5, {0x1, 0x401}}, {0x1f, 0x9, {0x2}}, {0x1, 0xffff, {0x0, 0x1}}, {0xb5d8, 0x7, {0x2, 0x2}}, {0x5, 0x401, {0x2, 0x1}}, {0x7, 0x7, {0x2, 0x3}}]}}}, {{0x254, 0x1, {{0x3, 0x8}, 0x40, 0x9a, 0x2, 0x6, 0x23, 'syz1\x00', "968099fabc4dab435fe83c7367f8826b3a6756965f00c59f21499074cb3bc494", "1a1579fb0aab3d1bdf500ae989441b7ce17a0b812191c572f0561fabbf204914", [{0x1c14, 0x7, {0x3, 0xffff}}, {0x1f, 0xffff, {0x2, 0xffffff81}}, {0xffff, 0x8, {0x3, 0x5}}, {0x80, 0x6a7, {0x2, 0x9}}, {0x2, 0x6, {0x52780728d199b2d2, 0xfffffff8}}, {0x5c, 0x7fff, {0x2}}, {0x0, 0x80, {0x3, 0x9}}, {0x3a, 0x2, {0x0, 0x1}}, {0x5, 0x9, {0x1, 0xfff}}, {0x9, 0x6, {0x1, 0x2}}, {0x1, 0x5, {0x0, 0xfff}}, {0x8001, 0x8, {0x1, 0x8}}, {0x3, 0x483, {0x1, 0x42}}, {0x800, 0x6, {0x3, 0xff}}, {0x5, 0x9, {0x3, 0x8}}, {0x3, 0xfffc, {0x2, 0x8}}, {0x7ff, 0x1, {0x1, 0x20}}, {0xfffe, 0x9, {0x3, 0x9}}, {0x8, 0x0, {0x1, 0x3}}, {0x8, 0x1, {0x3, 0xff}}, {0x8000, 0xbde8, {0x2}}, {0x6, 0x7fff, {0x1183e4949aefb840, 0x2}}, {0x5, 0xffff, {0x0, 0x2}}, {0x6, 0x2, {0x0, 0x1}}, {0x400, 0x6, {0x0, 0x3}}, {0x0, 0xbf, {0x0, 0x101}}, {0x2, 0x7, {0x3, 0xfffffeff}}, {0xb71c, 0x0, {0x3, 0x10001}}, {0x9, 0xb5, {0x0, 0x6b55}}, {0x1, 0x3, {0x1, 0x1}}, {0x0, 0x3361, {0x3, 0x1}}, {0x80, 0x2, {0x0, 0x7ff}}, {0x4, 0xe08, {0x3, 0x4}}, {0x1, 0x1, {0x0, 0x4c33}}, {0x7, 0x7eea, {0x3, 0x5}}, {0x0, 0xfff7, {0x2, 0x1}}, {0x57, 0x1, {0x1, 0x140}}, {0x0, 0x8, {0x0, 0x9}}, {0x61f, 0x2, {0x0, 0x82}}, {0x1, 0x1000, {0x3, 0x8}}]}}}]}, 0x1060}, 0x1, 0x0, 0x0, 0x40000}, 0x24040014) fcntl$getown(r0, 0x9) 14:58:39 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x12}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:58:39 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = fork() r1 = open_tree(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x9100) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x204, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x5, 0xc0, 0x81, 0x80, 0x0, 0x4, 0x10400, 0x6, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f0000000280), 0xa}, 0x4000, 0x0, 0x7, 0x5, 0x7fffffff, 0x0, 0x7, 0x0, 0x6, 0x0, 0xd7c}, r0, 0xc, r1, 0x1) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x20881, 0x0) perf_event_open(&(0x7f0000000300)={0x6, 0x80, 0x3f, 0x1f, 0x1f, 0x3, 0x0, 0x7, 0x30010, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xbdd1, 0x0, @perf_config_ext={0x0, 0x6}, 0x198b8, 0xabc, 0x4, 0x9, 0x80, 0x100, 0x9, 0x0, 0x9, 0x0, 0x400}, r0, 0xf, r2, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r3, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYBLOB="a7f7c1ea4ca07e5566"]) r4 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x1d, &(0x7f0000000100)={0x0, 0xfdc7}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000280)=0x0) syz_io_uring_submit(r5, r7, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x2000) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r8 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r8, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee7ffffffff00000000000009000000ff0000000001ffff0a44d1fdd176ff00700e00ac0000ffff0002fffff7ff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r9}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000015, 0x4000010, r4, 0x0) 14:58:39 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r2, 0x4, 0x2400) fcntl$setstatus(r2, 0x4, 0x0) readv(r2, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/177, 0xb1}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f0000000140)=""/83, 0x53}, {&(0x7f0000000380)=""/189, 0xbd}, {&(0x7f0000000500)=""/66, 0x42}], 0x5) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:58:39 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:58:39 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/103) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r2, 0x4, 0x2400) fcntl$setstatus(r2, 0x4, 0x0) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f00000001c0)) fcntl$setstatus(r1, 0x4, 0x2400) fcntl$setstatus(r1, 0x4, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x28, 0x1a, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0xc, 0x1d, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xffffffffffffffff}]}]}, 0x28}}, 0x0) 14:58:39 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000040)={0x0, "4384334833f4e3d189417d3277271d35"}) fcntl$setown(r1, 0x8, 0x0) fcntl$addseals(r0, 0x409, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r2, 0x4, 0x2400) 14:58:39 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x104, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}, 0x0, 0x0, 0x42a}, 0x0, 0x3, 0xffffffffffffffff, 0x8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) fcntl$setstatus(r1, 0x4, 0x2400) fcntl$setstatus(r1, 0x4, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f00000006c0)={{r0}, "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"}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @remote, @initdev}, &(0x7f0000000140)=0xc) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x802c2, 0x0) ioctl$FITRIM(r3, 0xc020662a, &(0x7f0000000080)={0x0, 0xfff7fffffffffff7}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, 0x0) write$P9_RMKDIR(r3, &(0x7f0000000040)={0x14, 0x49, 0x2, {0x89, 0x5}}, 0x14) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:58:39 executing program 5: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) connect$802154_dgram(r0, &(0x7f00000000c0)={0x24, @long={0x3, 0xffff}}, 0x14) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl(r1, 0x6, &(0x7f0000000000)="251088079d7dfca268cb896538d6b7e06c4a6e27eb9da685d6ee75c3f323ab15f6cbee49633b1eef2491d7374e08bc4c7679121f620f3bac19a23ff84119c9e4a7bd49b2c48772a3f94e5990e3461c49b24e246df0ad95f68de2198bfeb5c43841c7561a7788a6b16ac111560103a6b006d57491") fcntl$getown(r1, 0x9) [ 2187.808770] netlink: 'syz-executor.1': attribute type 29 has an invalid length. 14:58:39 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x48800) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r1, 0x4, 0x2400) fcntl$setstatus(r1, 0x4, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$FITRIM(r2, 0xc020662a, &(0x7f0000000080)={0x0, 0xfff7fffffffffff7}) ioctl$KDADDIO(r2, 0x4b34, 0x5b) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x3) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r3, 0x4, 0x2400) fcntl$setstatus(r3, 0x4, 0x0) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000040)={0x400, 0x0, 0x1}) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r4, 0x4, 0x2400) fcntl$setstatus(r4, 0x4, 0x0) close(r4) fcntl$getown(r0, 0x9) 14:58:39 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/103) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r2, 0x4, 0x2400) fcntl$setstatus(r2, 0x4, 0x0) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f00000001c0)) fcntl$setstatus(r1, 0x4, 0x2400) fcntl$setstatus(r1, 0x4, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) socket$netlink(0x10, 0x3, 0x0) 14:58:39 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) 14:58:39 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x18}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:58:39 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r1, 0x4, 0x2400) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000000c0)={0x0, 0x4, 0x9, 0x1}) fcntl$setstatus(r2, 0x4, 0x2400) fcntl$setstatus(r2, 0x4, 0x0) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000080)) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='fd\x00') getsockopt$IP_SET_OP_GET_BYNAME(r3, 0x1, 0x53, &(0x7f0000000500)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000540)=0x28) fcntl$setstatus(r1, 0x4, 0x0) fcntl$setstatus(r1, 0x4, 0xc00) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x6e, 0x4, 0x6, "2fa318561e6b68f2781088e2151808ab8d275785ffe579464826e2e3fce5b91fcb8a4d71c067933534b17b2d886dce7292b7cdb8e1d412add97ba15352288729ec07c892bd6ae1c895ee32ef5c3673a8a8f151e1f8b3ee6efbab1f6f6bbbf011089c967cfa4614047215ddcd1ad2"}) fcntl$getown(r0, 0x9) 14:58:55 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = memfd_create(&(0x7f0000000340)='\x00', 0x2) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="ce56", 0x2}], 0x1, 0xfff, 0x0, 0x0) fcntl$addseals(r2, 0x409, 0xe) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000000)={0x39b, 0x1, 0x6, 0x0, 0x2, "bb553225eee1e74eca730343a2e73d24765b9d", 0xfffffffb, 0x6}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0x2, 0x2, 0x20, 0x400, 0x32, "1c265fd846d129ef254d94098aa0d67104b100", 0x5, 0xff800000}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) fcntl$setstatus(r3, 0x4, 0xa444aeeeb4a801e2) 14:58:55 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x1e}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:58:55 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r1, 0x4, 0x2400) fcntl$setstatus(r1, 0x4, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000000)={0x2, 0x9ea, 0xea8e, 0x71, 0xff, "39683446a3b4475975257177b77b1fe0bf89a0", 0x101, 0x401}) fcntl$getown(r0, 0x9) 14:58:55 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:58:55 executing program 7: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x9}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) r2 = syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000006c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) fsetxattr$security_evm(r2, &(0x7f0000000040), &(0x7f0000000080)=@v1={0x2, "52fe4cf2"}, 0x5, 0x2) syz_io_uring_setup(0x1d, &(0x7f0000000100), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0xfc292a8c574ae91a}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x110, r2, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f0000000140)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x2) 14:58:55 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/103) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r2, 0x4, 0x2400) fcntl$setstatus(r2, 0x4, 0x0) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f00000001c0)) fcntl$setstatus(r1, 0x4, 0x2400) fcntl$setstatus(r1, 0x4, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 14:58:55 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x8000, 0x0) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000000, 0x118051, r5, 0x1000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r6}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:58:55 executing program 4: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x810, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x8}, 0x4006, 0x2, 0x7ff, 0x3, 0xfffffffffffffffe}, 0x0, 0x7, 0xffffffffffffffff, 0x19) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_setup(0x1d, &(0x7f0000000100), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0xfc292a8c574ae91a}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000380)={0x19d, 0x3, &(0x7f0000000500)}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r5, 0x4, 0x2400) fcntl$setstatus(r5, 0x4, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000900)=ANY=[@ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="009704c410217db6b8ae4e000000000000f22e6c653000000000b7c7ffcce79fe0b601ea4fd143f7edd2e4fa57984b9aa581b4b7a996262c06d2d283bc3a6cbb40831672206b560d1504e3808258b9f2ab9a19bd92f04a78903460c2610738b53becacb802a6dd18be9e99d2e87a60aa1aebbf7c5f72b5207d540a69f11847f7daccc8bb4c8875ae3cc7da41f2e2615a902004b17ef18bf2be6ff3693c6c1339893c5ee3661acbcff3b8133d1b32f4c4ffba2a92abad8ccb79b8aa4cf6072abf942f197ab8dc950b2a6b94bc7518"]) r6 = accept4(r1, 0x0, &(0x7f0000000040), 0x81800) dup2(r6, r0) 14:58:55 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/103) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r2, 0x4, 0x2400) fcntl$setstatus(r2, 0x4, 0x0) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f00000001c0)) fcntl$setstatus(r1, 0x4, 0x2400) fcntl$setstatus(r1, 0x4, 0x0) 14:58:55 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x7800) fcntl$setstatus(r1, 0x4, 0x0) fcntl$getown(r1, 0x9) 14:58:55 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000040)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x6, "7ec8a27ca2e220"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001040)={{r1, 0x86ce, 0x80, 0x1, 0x6, 0x2, 0x800, 0x9, 0x63, 0x0, 0x5, 0x7, 0x11500000, 0x1}}) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 14:58:55 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x24}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:58:55 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:58:55 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x100000001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x20, 0xffffffff, 0xfffffffe}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000040)=0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x10, r1, 0x0) syz_io_uring_submit(r3, r0, &(0x7f0000000180)=@IORING_OP_WRITE={0x17, 0x5, 0x6000, @fd_index=0x2, 0xffffffff, &(0x7f00000002c0)="a90384def6b69ff1e3b78785f28449b5925ea93f59c773c22c459e61effe88a8ab35d72a95a76e845ff821050ddac75ed03f499296bc103b6ad72e1b45548e54f256cb40f80bb68502cc35955814e24dea2cde612ac65d637e7dbb6d74bde36ee279bb4761b301f4ddcac8e5ea", 0x6d, 0x0, 0x1}, 0x10001) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x109002, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:58:55 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ftruncate(r1, 0x181a5e17) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:58:55 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/103) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r2, 0x4, 0x2400) fcntl$setstatus(r2, 0x4, 0x0) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f00000001c0)) fcntl$setstatus(r1, 0x4, 0x2400) 14:58:55 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_pts(r0, 0x1810c0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x5606, 0x7) fcntl$setstatus(r2, 0x4, 0x2400) 14:58:55 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:58:55 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000000040)={&(0x7f00000002c0)=""/247, 0xf7}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x10800, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r3, 0x40309410, &(0x7f00000000c0)={0x53, 0x6cf, 0x3, 0x0, 0x0, [0x8, 0x1, 0x3ff]}) 14:58:55 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2a}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:58:55 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r3, 0x4, 0x2400) fcntl$setstatus(r3, 0x4, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r4, 0x4, 0x2400) fcntl$setstatus(r4, 0x4, 0x0) r5 = syz_open_pts(r2, 0x3c5650a7ad5f606b) r6 = fcntl$dupfd(r5, 0x0, r3) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000340)={0x8, 0x100, 0x3, 0x5, 0x57, "c9d02b7236773c647906c2a28976a349a9312c", 0x2, 0xffff}) fcntl$setstatus(r4, 0x4, 0x40400) fcntl$setstatus(r2, 0x4, 0x0) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f0000000000)) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d4, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x1a}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4798ac33de4d4372fc3e1c968f6d4a005a6f1ec4ca4b8bcb"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "60ac8807aed9c20f61c0f015e8599c72bde0d2fe974cc3d0"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "46e131109556a566254e81a512a69c6d12952c576db0d104"}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "25f4e3831f3a707040183b09628cb44b8199c987cf2dbe9d"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e94b44f94c286830963418de97e7a8c5b8f08a5abd74773b"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5414dc3b435267cdfc0523a4ac4cdaed9f0d00ce5d39ac00"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b730f9adcff7cb381517f9431f71bf777def96632b557435"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f5123959927e569f39cfa689e77f5747972767cee0303024"}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x11}, 0x10) fcntl$setstatus(r1, 0x4, 0x2400) fcntl$getown(r1, 0x9) 14:58:55 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/103) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r1, 0x4, 0x2400) fcntl$setstatus(r1, 0x4, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f00000001c0)) 14:58:55 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x7ff) fallocate(r1, 0x10, 0xffff, 0x2) 14:59:11 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:59:11 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r1, 0x4, 0x2400) 14:59:11 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$FITRIM(r4, 0xc020662a, &(0x7f0000000080)={0x0, 0xfff7fffffffffff7}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r5, 0x4, 0x2400) fcntl$setstatus(r5, 0x4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x5, 0x0, r4, &(0x7f0000000040)={0x20000002}, r5}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r6, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r7}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:59:11 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r1, 0x4, 0x2400) fcntl$setstatus(r1, 0x4, 0x0) preadv(r1, &(0x7f0000003500)=[{&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000003480)=""/126, 0x7e}], 0x2, 0x8, 0x3) fcntl$setstatus(r0, 0x4, 0x2400) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r2, 0x4, 0x2400) fcntl$setstatus(r2, 0x4, 0x0) readv(r2, &(0x7f0000002440)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/191, 0xbf}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x3) r3 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xa7, 0x5, 0x20, 0x0, 0x0, 0x1, 0x80002, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x3, 0x161b8865}, 0x80, 0x71, 0x10000, 0x1, 0x4, 0x8001, 0x3ff, 0x0, 0x4, 0x0, 0xff}, r3, 0x3, 0xffffffffffffffff, 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$FITRIM(r4, 0xc020662a, &(0x7f0000000080)={0x0, 0xfff7fffffffffff7}) write$vga_arbiter(r4, &(0x7f0000000340)=@other={'lock', ' ', 'none'}, 0xa) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, &(0x7f0000000180)={'filter\x00', 0x0, 0x4, 0xde, [0x81, 0x7fff, 0x2, 0x2, 0x490, 0x7], 0x7, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000080)=""/222}, &(0x7f0000000200)=0x78) syz_open_procfs(r3, &(0x7f0000000040)='net/stat\x00') 14:59:11 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x4, 0x0, 0x2de}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, 0x0) syz_io_uring_setup(0x1d, &(0x7f0000000100), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0xfc292a8c574ae91a}, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x44c0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0x811c}, 0x1}, 0x9) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:59:11 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x30}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:59:11 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000140)=0x0) r2 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, r1, 0x0, 0xffffffffffffffff, 0x8) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, 0x0) r4 = fork() r5 = open_tree(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x9100) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x204, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r5, 0x0) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x5, 0xc0, 0x81, 0x80, 0x0, 0x4, 0x10400, 0x6, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f0000000280), 0xa}, 0x4000, 0x0, 0x7, 0x5, 0x7fffffff, 0x0, 0x7, 0x0, 0x6, 0x0, 0xd7c}, r4, 0xc, r5, 0x1) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x9, 0x41, 0x5, 0xed, 0x0, 0x7369, 0x2, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000040), 0x6}, 0x20, 0x3, 0x7, 0x6, 0xffffffffffffffff, 0x71ac8bd0, 0x1f, 0x0, 0x2, 0x0, 0x8}, r4, 0xf, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:59:11 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/103) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r1, 0x4, 0x2400) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f00000001c0)) 14:59:11 executing program 3: restart_syscall() fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x100) ioctl$FIOCLEX(r1, 0x5451) 14:59:11 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/103) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f00000001c0)) 14:59:11 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:59:11 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYBLOB="8d993f00000075aeace51cb6ab0c8d05f2e46dfc7ccdf8f2aade59cdb66b99c943315cea334093dab2b44f82c692fd2523cbb5a4fb94eb7828b0bec64578f56a4ff754a1c287cf0cde56a54f180e14315b7abfe2a682b0b5dda523ff1a079312ca6bb89c71a454c130e60ca9217a5d"]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01010000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffff7d81ac1e1eb5cfbf25b9836aefbc55ff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = open$dir(&(0x7f0000000040)='./file0\x00', 0x10000, 0xac) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000440)=0xe8) fsetxattr$security_capability(r6, &(0x7f0000000180), &(0x7f0000000500)=@v3={0x3000000, [{0x6, 0x9}, {0x6, 0xffff1e45}], r7}, 0x18, 0x2) 14:59:11 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x8, &(0x7f0000000000)=[{0x0, 0x3}, {0x9, 0x7f}, {0x5, 0x9}, {0x1, 0xff}, {0x8001, 0x800}, {0x8, 0x100}, {0x8001, 0x7}, {0x7fff, 0x81}]}) fcntl$setstatus(r0, 0x4, 0x2400) 14:59:11 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:59:11 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/103) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f00000001c0)) 14:59:29 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r2, 0x4, 0x2400) fcntl$setstatus(r2, 0x4, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f00000006c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) fallocate(r1, 0x1, 0x7, 0x5) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:59:29 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x9) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r1, 0x4, 0x2400) fcntl$setstatus(r1, 0x4, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r2 = syz_mount_image$nfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x77c, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="37b1c69255b794110c09a57a2401b0147e6cfb971c1b4e5c6dd2db2e4bf4d56f91f3c4a2cf9611228412df31c5cb82f1420f3145e30bd3de4b70d36080ddd7f95d9f4bbb9044f549f7bbbc568e29ad25cd41b1f0732f2ba2e606fc13d4b54830f76953b0f71505a623211d1df0e6593da379b215f4124501cc7fd29bb24ecfedbb02454aecfc45eac83a9a252a508270b937", 0x92, 0x4195}], 0x20000, &(0x7f0000000240)={[{}, {'%!'}, {'\\'}, {}, {}, {'$%'}], [{@appraise_type}]}) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f0000000000)=0xfffffffffffffffe) ioctl$TCXONC(r1, 0x540a, 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$FITRIM(r3, 0xc020662a, &(0x7f0000000080)={0x0, 0xfff7fffffffffff7}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, 0x0) r4 = openat(r3, &(0x7f0000000040)='./file0\x00', 0x12880, 0x0) r5 = dup3(r1, r1, 0x0) dup3(r5, r4, 0x80000) 14:59:29 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r4, 0x4, 0x2400) fcntl$setstatus(r4, 0x4, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000500)={{r1}, 0x0, 0x10, @inherit={0x58, &(0x7f0000000140)={0x1, 0x2, 0x6, 0x3f, {0x0, 0xe7f, 0x427c, 0x4, 0x9c}, [0x2, 0x1]}}, @subvolid=0x914}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3304, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006580)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x6, &(0x7f0000006540)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x9}, 0x2a) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000700)={{}, r5, 0x4, @inherit={0x58, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000000200000000000000ff0100000000000040000000000000002a00000000000000040000000000000001800000006f00000000000000000000800000000000000000000000010000000200000000000000"]}, @devid}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000001500)={{r4}, r5, 0xc, @unused=[0x1, 0x7fffffff, 0x559, 0x7], @subvolid=0x1000}) 14:59:29 executing program 3: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl(0xffffffffffffffff, 0x400, &(0x7f0000000080)="d9975833f70e24d3a027652df84a21d1598362d98f5153caebe34563f0fbd9019b6629f19d7e6ba37920c5d90bcc68e9080d97f135c860ec21fb4ccd") fcntl$setstatus(r1, 0x4, 0x2400) fcntl$setstatus(r1, 0x4, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x280, 0x10) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000000)={0x1, 0x7, 0x1, 0x6, 0xfff, 0xb240}) fcntl$setstatus(r0, 0x4, 0x2400) 14:59:29 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x3c}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:59:29 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/103) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f00000001c0)) 14:59:29 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYBLOB="abf308f25031761a2893e99d888b0951d09bc5a0d2b7425d5fa0afe169e1488494fcc73f6d3f799a750f5084704b245b0d01047c3e582a7ba6c13c6edec89fe34674b08048faa3451596109931d322b08d7934d0a844bb9ea261f3d9fd3649b1dee5af0d75e329518825d43d4fd51a56a4fda24abc434df54ba6a011b42034b5e7d748f49dbbe86162ecf9859bd51ffe1211db7c0ea6952d31f4698f63ed0967729f71f31f8f4d6ed22497821b00fbcc6cd069ef28b45197f43f362bc678"]) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x50052, r0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r6}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) 14:59:29 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x10800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:59:29 executing program 3: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x5000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) fcntl$setstatus(r0, 0x4, 0x2400) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r1, 0x4, 0x2400) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x7bc}]}) fcntl$setstatus(r1, 0x4, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x1, 0x6, 0x1, 0x9, 0x3, 0x3e, 0x6, 0x28a, 0x40, 0x250, 0x80, 0x5, 0x38, 0x2, 0xfff, 0xff, 0x5}, [{0x1, 0x6, 0x0, 0x7, 0x6, 0x5, 0xde32, 0x8}], "41a47cab39b6bf6980c9d2a1777c6e4a6aaf4133b42350fcfc576907f40c473d716d06a45910ee1c0f73e441b64e282708bb4f4fe867fd9c19bfc698866afebfde1497591e41511594d5c1b335b7dc490e98743457f0035bcc845c139a855a4f7c5e1e3662e8a6e89010e72454d52e441a4088d2ea4f83f5bbd9f2485f9eac9faafc", ['\x00', '\x00']}, 0x2fa) 14:59:29 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/103) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f00000001c0)) 14:59:29 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x42}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:59:29 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/103) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f00000001c0)) 14:59:29 executing program 7: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x2, 0x1, 0x9, 0x6, 0x0, 0x1, 0x88001, 0x5, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xb99, 0x2, @perf_config_ext={0x2, 0x9}, 0x120, 0x10001, 0x401, 0x6, 0x4, 0x8, 0x0, 0x0, 0x40f, 0x0, 0x3}, 0x0, 0xf, r0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(0xffffffffffffffff, &(0x7f0000002b80)=""/76, 0x4c, 0x200000000000c) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000040)=ANY=[@ANYBLOB="349cea387d8596a9cad5bee2784fb404b0b79a741b6c628eb8a3bf90b29230a2dc11575d7c8b1f7240e79a33699d869af5add17ab5ebf3153de68d7a44c21318347ac9cd70ba1200"/82]) pread64(r0, &(0x7f00000000c0)=""/19, 0x13, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f00000002c0)={'broute\x00', 0x0, 0x0, 0x0, [0x8001, 0x1d, 0x3, 0x3, 0x200, 0x1], 0x7, &(0x7f0000000140)=[{}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000440)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r4, 0x4, 0x2400) fcntl$setstatus(r4, 0x4, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f00000006c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) readv(r2, &(0x7f0000002b40)=[{&(0x7f0000000ac0)=""/35, 0x23}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/63, 0x3f}], 0x4) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) r5 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@nodevmap}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}, {@cache_fscache}, {@dfltgid={'dfltgid', 0x3d, 0xffffffffffffffff}}, {@afid}, {@fscache}, {@cache_loose}], [{@fsmagic={'fsmagic', 0x3d, 0x4}}, {@smackfsroot={'smackfsroot', 0x3d, '\xeb\'-'}}, {@dont_measure}, {@uid_gt={'uid>', 0xffffffffffffffff}}]}}) 14:59:29 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB="cf2cbc8695db2b2b490002000000000000000029550309c0000000000000"]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1f80400002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000042000000ea54ffff210005000100000000250000000020"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r6, 0x4, 0x2400) fcntl$setstatus(r6, 0x4, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6, @ANYBLOB="000000000000f8002e2f66696c653000"]) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000300)={0x2, &(0x7f0000000040)=[{0x9, 0x7f, 0x0, 0x80}, {0x100, 0xff, 0x3, 0x40}]}) vmsplice(r7, &(0x7f0000000440)=[{&(0x7f0000000340)="eba2af01ed3215845dc84417be4ba375c274cda4446bb824092fde4c5b4bd7eb21d36eecf5af7a31a630aceb4924c20f61f3472d254f25692c4df13279c3eddb4d6b48f5ba49256ce26b66d088c04f6a503a211a309ae86baaf61a7c5908f900389981f2075f419253f6c5114f5f5fff7fb1503e54d44a8d5ebd084455894fcdc770d74fe077c9d6ffe12be87a55c55b92286091207ea65191562bef93577a34bf539409847e4c0784ade3745a54c2ff74efcbaebc00301e31ca6a0c156f8ed49fc50317554691368c", 0xc9}], 0x1, 0x2) 14:59:45 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x10800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 14:59:45 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x46800) 14:59:45 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x46000) fcntl$getown(r0, 0x9) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r1, 0x4, 0x2400) fcntl$setstatus(r1, 0x4, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r2, 0x4, 0x2400) fcntl$setstatus(r2, 0x4, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r3, 0x4, 0x2400) fcntl$setstatus(r3, 0x4, 0x0) sendfile(r3, r2, &(0x7f0000000040)=0x40, 0xf3) sendfile(r1, r2, &(0x7f0000000000)=0xf1, 0x8) 14:59:45 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x60}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 14:59:45 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) syz_io_uring_setup(0x1d, &(0x7f0000000100), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000380)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x77359400}, 0x1, 0x1}, 0x8) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000340), 0x80, 0x0) fcntl$setstatus(r3, 0x4, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r5 = fork() r6 = open_tree(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x9100) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000300)) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x5, 0xc0, 0x81, 0x80, 0x0, 0x4, 0x10400, 0x6, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f0000000280), 0xa}, 0x4000, 0x0, 0x7, 0x5, 0x7fffffff, 0x0, 0x7, 0x0, 0x6, 0x0, 0xd7c}, r5, 0xc, r6, 0x1) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x9, 0x5, 0x3f, 0xfd, 0x0, 0x6, 0x1, 0xa, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xffffc522, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x40000, 0x80, 0x2, 0x4, 0x20, 0x0, 0x9, 0x0, 0x100, 0x0, 0x6}, r5, 0x6, 0xffffffffffffffff, 0x1) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 14:59:45 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/103) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f00000001c0)) 14:59:45 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:59:45 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYBLOB="95333fd7270fb6ed6599d1aa1b8686c0ab59c3da6002abb9b98810f08425bf2adff6ae2497917adc4c4b139791130d43ef102f7ea8e22914bc30670f2cd938788567341a7ef31f5b76f4366e47ba62a59e0730544be35a0f74123281aa5255b688cf62d6ad8dc4c512a832956952caea0c007241b9ae5955490aad0c95f32d551b7b2a6550a4bb456dcfa836ed2a4c3b249945c5f6af506ae4c0eb289f7ad13b9c5053956759c2cc565cfe7a687be2cd877da2076c06c630721afb0b6f45c39c88c0"]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 14:59:45 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) 14:59:45 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x9) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f0000000040)={0x3, 0x1}) 14:59:45 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/103) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f00000001c0)) 14:59:45 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r1, 0x4, 0x2400) fcntl$setstatus(r1, 0x4, 0x0) sendfile(r0, r1, &(0x7f0000000040)=0x80000001, 0x4) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 14:59:45 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, 0x0) r3 = clone3(&(0x7f0000000400)={0x80, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180), {0x1e}, &(0x7f00000002c0)=""/119, 0x77, &(0x7f0000000340)=""/182, &(0x7f00000001c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x9, {r0}}, 0x58) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x1, 0x3, 0x1f, 0xff, 0x0, 0x1cb1545, 0x10, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x401, 0x1, @perf_config_ext={0x0, 0x4}, 0x214c, 0x2, 0xfffffffd, 0x0, 0xfffffffffffffffb, 0x8000, 0x2e, 0x0, 0x96e, 0x0, 0x1ff}, r3, 0xa, r0, 0x2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 14:59:45 executing program 0: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r3, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r4 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000180)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@ll={0x11, 0x17, r7, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x9) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r9 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x7, 0x4, 0x9, 0x1, 0x0, 0x6, 0x40088, 0xa, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x300000, 0x0, @perf_config_ext={0x101, 0x101}, 0x40, 0x0, 0x6, 0x7, 0x6, 0x5, 0x93, 0x0, 0xb395}, 0xffffffffffffffff, 0xc, r0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r10, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r9, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r11}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) 14:59:45 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f00000001c0)) 15:00:00 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) fcntl$setstatus(r0, 0x4, 0x2400) 15:00:00 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x400) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r1, 0x4, 0x2400) fcntl$setstatus(r1, 0x4, 0x0) fcntl$getown(r1, 0x9) 15:00:00 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xff, 0x0, 0x0, 0x3, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000000}, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"]) syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}, 0x80, 0x0, 0x0, 0x1}, 0x0, 0xf, 0xffffffffffffffff, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$FITRIM(r3, 0xc020662a, &(0x7f0000000080)={0x0, 0xfff7fffffffffff7}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x28, 0x1a, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0xc, 0x1d, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xffffffffffffffff}]}]}, 0x28}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000018c0)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/50, 0x32}, {&(0x7f0000000400)=""/36, 0x24}, {&(0x7f0000000500)=""/198, 0xc6}], 0x4}, 0x0, 0x20, 0x1, {0x2}}, 0x7f) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000009, 0xa010, r3, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r4, 0x4, 0x2400) fcntl$setstatus(r4, 0x4, 0x0) preadv(r4, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/235, 0xeb}], 0x1, 0x3, 0x3e6c) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 15:00:00 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1d, &(0x7f0000000100), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0xfc292a8c574ae91a}, 0x0) r2 = syz_io_uring_setup(0x1d, &(0x7f0000000100), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0xfc292a8c574ae91a}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x40010, r5, 0x8000000) syz_io_uring_submit(r0, r4, &(0x7f0000000180)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)=0x80, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x0, 0x0, 0x1}, 0x1) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r6, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r6, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r7 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0xffffffffffffffce, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r10}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) 15:00:00 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f00000001c0)) 15:00:00 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x10800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 15:00:00 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x121}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 15:00:00 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x10003a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002, 0xfffffffe}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r0, 0x8000000) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r2, &(0x7f0000000240)=""/83, 0x53, 0x200000048) syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3af}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000380)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, 0x0) r5 = fork() r6 = open_tree(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x9100) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x204, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r6, 0x0) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x5, 0xc0, 0x81, 0x80, 0x0, 0x4, 0x10400, 0x6, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f0000000280), 0xa}, 0x4000, 0x0, 0x7, 0x5, 0x7fffffff, 0x0, 0x7, 0x0, 0x6, 0x0, 0xd7c}, r5, 0xc, r6, 0x1) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x484800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x96, 0x3f, 0x80, 0x3, 0x0, 0xffffffff, 0x8400, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x2}, 0x44021, 0x8, 0x9, 0x7, 0xa8a6, 0x8, 0xfff, 0x0, 0x100, 0x0, 0x6}, r5, 0x7, r7, 0x1) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) syz_io_uring_submit(r8, r1, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)='./file0\x00', 0x100, 0x400041, 0x23456}, 0xffff0000) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 15:00:00 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x9) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.dequeue\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0x380000000000, 0x307002) syz_open_dev$tty20(0xc, 0x4, 0x0) fsmount(r2, 0x0, 0x8c) ioctl$TIOCGPTPEER(r1, 0x5441, 0xfffffffffffffff7) 15:00:00 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f00000001c0)) 15:00:00 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) fcntl$setstatus(r1, 0x4, 0x800) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000040)) 15:00:00 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x1a5}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 15:00:00 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) inotify_init() ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000080)) 15:00:00 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x408002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1d, &(0x7f0000000100), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0xfc292a8c574ae91a}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r0, 0x10001, &(0x7f0000000140)=[{&(0x7f00000002c0)="51d4da3d62595a6260e0e84d92c7d786a993e85559de4803684441358d0e05063a55a8ef3cd6901abe86168e7d4856827dfa0fa0149783add4bd64b519dec2f17706f12ec6167714a2137ac5eaf039f2a85bdd9605986e66cca3ce2ba66fd0b6b25663fb86907c57b01ac8aa48039703d10a15cd6d9b1b7eb445b53aabc4edde531961b573ae631c5ed682a05211eff4d3a4061af88de65cb27c378fdf70cfda6e1b34cb311ffbb7aa42a7887c120a83db5fab561ea7a52a62ebe76bc11bb4fe4a604c0fb0b880c87729950cec9016564bc254874f16b5ce0d92262a04dfdcd302d14f65c7e1f3e544612d5192010ba0f2bb4e8797", 0xf5}, {&(0x7f0000000500)="4797775cb8de6e8bc32910ec473a6c7608464b0f9a4d23730e698214928313e0172a9c2ba7609a7d75c104260191257724e0a5bd3c0595f199858551c06157f74628e3b2ae0e7670a001c8ff425a381d563abdde1e41ebd3f7f6a0cda7d51655990203d72c0894d7b330391ab5dbc7ecfecc9fcde9a553d13ae3e25dc11fa4dc8c247d19136ebceb4ad035133c6ddc829772b2a524d7c274f001b7972a933b9f8fdf6766636247d8b1239ee389c40032af405e2e580a7ca5c0f4518ed2e9fef7d9612b4e", 0xc4}, {&(0x7f0000000040)="3b69614ee4da4fa8781444263677c1a3eab676d957c2bfdf6cd1962d2458cfb01c01", 0x22}], 0x3, 0x1, 0x0, {0x2, r6}}, 0x6) io_submit(0x0, 0x0, &(0x7f00000003c0)) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 15:00:00 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_WAITACTIVE(r0, 0x5607) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000000)={0x8, 0x2, 0x6, 0x0, 0x5, 0x8003}) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x9) 15:00:00 executing program 1: ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000000)=""/103) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f00000001c0)) 15:00:15 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001240)={0x0}, &(0x7f0000001280)=0xc) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r4, 0x4, 0x2400) fcntl$setstatus(r4, 0x4, 0x0) ioctl$TCGETA(r4, 0x5405, &(0x7f0000001380)) r5 = fork() r6 = open_tree(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x9100) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x204, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r6, 0x0) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x5, 0xc0, 0x81, 0x80, 0x0, 0x4, 0x10400, 0x6, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f0000000280), 0xa}, 0x4000, 0x0, 0x7, 0x5, 0x7fffffff, 0x0, 0x7, 0x0, 0x6, 0x0, 0xd7c}, r5, 0xc, r6, 0x1) clone3(&(0x7f0000001300)={0x100840c00, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x23}, &(0x7f0000000140)=""/220, 0xdc, &(0x7f0000000240)=""/4096, &(0x7f00000012c0)=[r2, r3, r2, r5, r2], 0x5}, 0x58) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)=r2) fcntl$setstatus(r1, 0x4, 0x2400) 15:00:15 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 15:00:15 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) fcntl$getown(r0, 0x9) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r1, 0x4, 0x2400) fcntl$setstatus(r1, 0x4, 0x0) dup3(r0, r1, 0x0) 15:00:15 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x1dd}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 15:00:15 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x3ac6, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) 15:00:15 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x10800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) 15:00:15 executing program 1: ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000000)=""/103) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f00000001c0)) 15:00:15 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1}, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x81, 0x9, 0x1, 0xd5, 0x0, 0x1f, 0x110, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x2000, 0x0, 0x3, 0x2, 0x6, 0xb924, 0x200, 0x0, 0x2, 0x0, 0x4}, 0x0, 0xc, r0, 0x1) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x5b, 0x5, 0x7, 0xbe, 0x0, 0x9, 0x30, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x1ff, 0x1}, 0x8740, 0x1, 0x16, 0x3, 0x7fff, 0xbb, 0x7ff, 0x0, 0x5, 0x0, 0x800}, 0xffffffffffffffff, 0xe, r3, 0x10) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 15:00:16 executing program 1: ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000000)=""/103) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f00000001c0)) 15:00:16 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x2400) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x6, 0xfffffff9, 0xea4, 0x6, 0x1a, "4f6ebea41d7d5c0d5a4498caf8f8d61a545389"}) fcntl$getown(r0, 0x9) 15:00:16 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x1de}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 15:00:16 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000040)=ANY=[@ANYBLOB="d22ab6c854cb9a62fbd08d358c1d98b12c24ad7f5977c9e5aef002936c97d856574f397df90b86b37ffbadd0355a1f959d0a630b90b478305df285f520b8c86db88b68dd91e14be04edad9b3285e473902aaf24f59a95f229134956696ca90ee99981cad0f81643a20ab08a3e4c57e6b2d1614cbdbb9fe5b6b456ab597aac6f5dedd8410e45fd06278b055952990529236fee90ffe"]) r1 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 15:00:16 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400002, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB]) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}}, 0x8) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000001d00)=ANY=[@ANYBLOB="01000000000000030000f30000e1000500002e00cfc5ccfee79b9b403725fdec0c000009000000ff0000000001ffffff00000000040000ffff0002ffffffff000008000000000000000000ea54ffff210005000100000000250000000020"]}, @devid=r5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x2010, r1, 0x0) 15:00:16 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r1, 0x4, 0x2400) fcntl$setstatus(r1, 0x4, 0x0) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{0x1000, 0x1}, {0x7, 0xfe00}, {0x1000, 0x100}, {0x7, 0xa5e}, {0x8, 0x81}, {0x2, 0x4}, {0x8, 0xb1a}]}) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r2, 0x4, 0x2400) fcntl$setstatus(r2, 0x4, 0x0) fcntl$setstatus(r2, 0x4, 0x2400) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x4) 15:00:16 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/103) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f00000001c0)) 15:00:16 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8002}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x1, 0x1}, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x4010, r1, 0x0) syz_io_uring_setup(0x43fa, &(0x7f00000002c0)={0x0, 0xd209, 0x0, 0x3, 0xb6, 0x0, r2}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff2000/0xc000)=nil, &(0x7f0000000180), &(0x7f0000000340)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_WRITEV={0x2, 0x4, 0x6004, @fd=r0, 0x7fffffff, &(0x7f00000003c0)=[{&(0x7f0000000380)="1a9d83e0b989528b782da512", 0xc}], 0x1, 0xc, 0x2, {0x1, r6}}, 0x3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r7 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) pipe2(&(0x7f0000000140), 0x80800) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000040)=0x40000000) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) 15:00:16 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) unshare(0x8000000) unshare(0x40480) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) unshare(0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fork() ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0xff, 0x23, 0x0, 0x0, 0xffffffffffffffd8, 0xab152, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x914}, 0x484, 0x4, 0x0, 0x3, 0x5, 0xd7, 0xffff, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(r1, r2) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000280)={&(0x7f0000000140)="3262257b475f9c59021f9c502967e6759cb3de7a982bbb", 0x17}) VM DIAGNOSIS: 15:05:24 Registers: info registers vcpu 0 RAX=ffff800000000000 RBX=ffff88801a93b0c8 RCX=ffffffff8125aeaa RDX=0000000000000000 RSI=0000000000000008 RDI=ffff88801a93b0c8 RBP=ffff88801a93b0c8 RSP=ffff88804ce078c0 R8 =0000000000000000 R9 =ffff88801a93b0cf R10=0000000000000246 R11=0000000000000001 R12=ffff888047199a40 R13=ffff88801a93b0c8 R14=ffff8880088b0000 R15=dffffc0000000000 RIP=ffffffff816cb11c RFL=00000296 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f4199336700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055a44ced1678 CR3=0000000047288000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=000000000000000041092b4000000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffff88800fa16a00 RCX=ffffffff811c310c RDX=1ffff1100124e73e RSI=0000000000000008 RDI=ffff88800fa16a00 RBP=0000000000200000 RSP=ffff88800fa9fd68 R8 =0000000000000000 R9 =ffff88800fa16a07 R10=0000000000000000 R11=0000000000000001 R12=ffff888009273480 R13=0000000000000000 R14=0000000000000086 R15=dffffc0000000000 RIP=ffffffff816c8e50 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe7400000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055a44ced1678 CR3=0000000047288000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=000000c0002cc030000000c0002cc000 XMM04=000000c0002cc1b0000000c000107e30 XMM05=000000c0002cc150000000c0002cc180 XMM06=000000c000072880000000c0003303c0 XMM07=000000c0002d2a00000000c0002cc4b0 XMM08=000000c000072940000000c0002ccbd0 XMM09=000000c0002ccab0000000c0002cc870 XMM10=000000c000072a00000000c0002ccae0 XMM11=000000c000072b00000000c000072ac0 XMM12=000000c0002ccdb0000000c0002ccd50 XMM13=000000c0002ccf00000000c0002ccd80 XMM14=000000c0002cd0e0000000c0002ccf30 XMM15=000000c0002d3220000000c0002ccf90