r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4347, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd130, 0x0, @perf_config_ext, 0x1028, 0x0, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800}, 0x1c)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x7)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=<r3=>0x0)
timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x1, @tid=r3}, &(0x7f0000000340))
syz_io_uring_setup(0x32d0, &(0x7f00000002c0)={0x0, 0x624f, 0x0, 0x0, 0x3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x3a7b, &(0x7f0000000480)={0x0, 0x55d3, 0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x10, 0x0, {0x1}}, 0x8)
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0)
syz_io_uring_submit(r5, 0x0, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index=0x7, 0x8000, 0x0, 0x2d5, 0x5}, 0x80000000)
r8 = syz_open_dev$mouse(&(0x7f0000000040), 0x1ff, 0xa0401)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000080)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xffffffff, 0x0, 0x1, {0x0, 0x0, r8}}, 0x79e4)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000001800)={0x0, 0x20})