BVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:56:53 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:56:53 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r13=>0x0, ""/256, 0x0, <r14=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "9ff4972d6c5303"})
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:56:53 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:56:53 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x10, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:56:54 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:56:54 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r13=>0x0, ""/256, 0x0, <r14=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "9ff4972d6c5303"})
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:56:54 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:56:54 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:56:55 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x10, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:56:55 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:56:55 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:56:55 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

[ 2110.778142][ T1324] ieee802154 phy0 wpan0: encryption failed: -22
[ 2110.784457][ T1324] ieee802154 phy1 wpan1: encryption failed: -22
05:56:55 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:56:56 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:56:56 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:56:56 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:56:56 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(0xffffffffffffffff)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:56:56 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:56:56 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(0xffffffffffffffff)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:56:56 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:56:57 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:56:57 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:56:57 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(0xffffffffffffffff)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:56:57 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:56:57 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:56:57 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:56:57 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:56:58 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:56:58 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:56:58 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:56:58 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:56:58 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:56:59 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:56:59 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r13=>0x0, ""/256, 0x0, <r14=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:56:59 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(0x0, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:56:59 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:56:59 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x0, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:56:59 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(0x0, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:56:59 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r13=>0x0, ""/256, 0x0, <r14=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:00 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x0, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:00 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(0x0, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:00 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:00 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r13=>0x0, ""/256, 0x0, <r14=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:00 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:00 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x0, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:01 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r10=>0x0, ""/256, 0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:01 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r6}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(0x0, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:01 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:01 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:01 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r6}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(0x0, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:01 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r10=>0x0, ""/256, 0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:02 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:02 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:02 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r6}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(0x0, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:02 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r10=>0x0, ""/256, 0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:03 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:03 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:03 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:03 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:03 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r9=>0x0, <r10=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r11=>0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:04 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:04 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:04 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:04 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r9=>0x0, <r10=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r11=>0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:04 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:05 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:05 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:05 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:05 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:05 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:06 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:06 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r9=>0x0, <r10=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r11=>0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:06 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:06 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:06 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:07 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r12=>0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:07 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:07 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:07 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:07 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:08 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:08 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:08 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r12=>0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:08 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:08 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:08 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r12=>0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:09 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:09 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:09 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:09 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:09 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:09 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r9=>0x0, <r10=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r11=>0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:09 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:10 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r9=>0x0, <r10=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r11=>0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:10 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:10 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:10 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:10 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:10 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:10 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:10 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:11 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r9=>0x0, <r10=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r11=>0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:11 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(0xffffffffffffffff)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r6}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:11 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:11 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:11 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:11 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(0xffffffffffffffff)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r6}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:11 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r13=>0x0, ""/256, 0x0, <r14=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:11 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(0xffffffffffffffff)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r6}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:12 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:12 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:12 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r6}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:12 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r13=>0x0, ""/256, 0x0, <r14=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:12 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:12 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r13=>0x0, ""/256, 0x0, <r14=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:12 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r6}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:12 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r6}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:12 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:13 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r13=>0x0, ""/256, 0x0, <r14=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:13 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:13 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:13 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:13 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:13 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:13 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(0xffffffffffffffff, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r2, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:13 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r13=>0x0, ""/256, 0x0, <r14=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:14 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:14 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:14 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r13=>0x0, ""/256, 0x0, <r14=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:14 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:14 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:14 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(0xffffffffffffffff, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r2, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:15 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:15 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(0xffffffffffffffff, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r2, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:15 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:15 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:15 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r12=>0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:15 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:15 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
dup(r0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r1, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r2, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:16 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r12=>0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:16 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:16 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r12=>0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:16 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:16 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
dup(r0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r1, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r2, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:16 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:16 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r13=>0x0, ""/256, 0x0, <r14=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:17 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:17 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r13=>0x0, ""/256, 0x0, <r14=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:17 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:17 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
dup(r0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r1, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r2, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:17 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r13=>0x0, ""/256, 0x0, <r14=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:17 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:18 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r0, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r2=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = dup(r3)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r5=>0x0, ""/256, <r6=>0x0})
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r9=>0x0, <r10=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r2, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r1, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:18 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:18 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:18 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r5=>0x0, ""/256, <r6=>0x0})
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r9=>0x0, <r10=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r11=>0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:18 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:18 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:18 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r0, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r2=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = dup(r3)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r5=>0x0, ""/256, <r6=>0x0})
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r9=>0x0, <r10=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r2, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r1, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:19 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r5=>0x0, ""/256, <r6=>0x0})
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r9=>0x0, <r10=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r11=>0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:19 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r5=>0x0, ""/256, <r6=>0x0})
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r9=>0x0, <r10=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r11=>0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:19 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:19 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r13=>0x0, ""/256, 0x0, <r14=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:19 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r6}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:19 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:19 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r13=>0x0, ""/256, 0x0, <r14=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:20 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r0, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r2=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = dup(r3)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r5=>0x0, ""/256, <r6=>0x0})
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r9=>0x0, <r10=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r2, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r1, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:20 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:20 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r6}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:20 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:20 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = dup(0xffffffffffffffff)
ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r1, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r2, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:20 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r6}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:20 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r13=>0x0, ""/256, 0x0, <r14=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:20 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:20 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:20 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = dup(0xffffffffffffffff)
ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r1, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r2, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:21 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:21 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = dup(0xffffffffffffffff)
ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r1, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r2, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:21 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:21 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:22 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(0xffffffffffffffff)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r12=>0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:22 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:22 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r5}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:22 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:22 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r5}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:22 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(0xffffffffffffffff)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r12=>0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:22 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:22 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:22 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r5}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:23 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:23 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(0xffffffffffffffff)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r12=>0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:23 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:23 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:23 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r13=>0x0, ""/256, 0x0, <r14=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:23 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:23 executing program 3:
read$msr(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:23 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:23 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:23 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r13=>0x0, ""/256, 0x0, <r14=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:24 executing program 3:
read$msr(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:24 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r13=>0x0, ""/256, 0x0, <r14=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:24 executing program 3:
read$msr(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:24 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c48"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:24 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c48"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:25 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:25 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c48"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:25 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(0x0, 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:25 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r12=>0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(0x0, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:25 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(0x0, 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:25 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r12=>0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(0x0, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:25 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c32"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:26 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r12=>0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(0x0, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:26 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(0xffffffffffffffff)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r6}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:26 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c32"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:26 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r12=>0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:26 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(0xffffffffffffffff)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r6}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:27 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(0x0, 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:27 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(0xffffffffffffffff)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r6}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:27 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c32"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:27 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r12=>0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:27 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:27 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r12=>0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:27 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:27 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c6"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:28 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r13=>0x0, ""/256, 0x0, <r14=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:28 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:28 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:28 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c6"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:29 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:29 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r13=>0x0, ""/256, 0x0, <r14=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:29 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r6}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(0x0, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:29 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c6"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:29 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r6}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(0x0, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:30 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91a"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:30 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r6}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(0x0, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:30 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:30 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r13=>0x0, ""/256, 0x0, <r14=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:30 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r6}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:31 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r6}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:31 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91a"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:31 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r0 = dup(0xffffffffffffffff)
ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r1, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r2, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:31 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r13=>0x0, ""/256, 0x0, <r14=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:31 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r6}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:31 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91a"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:32 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r0 = dup(0xffffffffffffffff)
ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r1, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r2, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:32 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:32 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r13=>0x0, ""/256, 0x0, <r14=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:32 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:33 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:33 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r13=>0x0, ""/256, 0x0, <r14=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:33 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r0 = dup(0xffffffffffffffff)
ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r1, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r2, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:33 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:33 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:33 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r13=>0x0, ""/256, 0x0, <r14=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:34 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:34 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r13=>0x0, ""/256, 0x0, <r14=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:34 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r1, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r2, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:35 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:35 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:35 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r13=>0x0, ""/256, 0x0, <r14=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:36 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r1, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r2, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:36 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:36 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:36 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r13=>0x0, ""/256, 0x0, <r14=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:36 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r13=>0x0, ""/256, 0x0, <r14=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:36 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:36 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d3"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:36 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r7=>0x0, ""/256, <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r9}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r13=>0x0, ""/256, 0x0, <r14=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:37 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r1, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r2, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:37 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(0xffffffffffffffff, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r12=>0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r2, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:37 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d3"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:37 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:37 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:37 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(0xffffffffffffffff, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r12=>0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r2, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:37 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r1, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r2, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:38 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(0xffffffffffffffff, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r12=>0x0, ""/256, 0x0, <r13=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r2, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:38 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d3"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:38 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r1, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r2, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:38 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:38 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:39 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:39 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:39 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:39 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
dup(r0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(0xffffffffffffffff, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r2=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r5=>0x0, ""/256, <r6=>0x0})
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r9=>0x0, <r10=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r11=>0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r2, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r1, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:39 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r1, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r2, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:39 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:40 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
dup(r0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(0xffffffffffffffff, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r2=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r5=>0x0, ""/256, <r6=>0x0})
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r9=>0x0, <r10=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r11=>0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r2, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r1, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:40 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r1, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r2, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:40 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:40 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:40 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
dup(r0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(0xffffffffffffffff, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r2=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r5=>0x0, ""/256, <r6=>0x0})
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r9=>0x0, <r10=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r11=>0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r2, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r1, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:40 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:41 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(0xffffffffffffffff, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r4=>0x0, ""/256, <r5=>0x0})
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r6}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r8=>0x0, <r9=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r10=>0x0, ""/256, 0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:41 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(0xffffffffffffffff, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r6}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r2, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:41 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r1, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r2, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:41 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(0xffffffffffffffff, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r6}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r2, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:41 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(0xffffffffffffffff, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r6}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r2, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:41 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:41 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x0, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r1, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r2, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:42 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(0xffffffffffffffff, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r4=>0x0, ""/256, <r5=>0x0})
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r6}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r8=>0x0, <r9=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r10=>0x0, ""/256, 0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:42 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
dup(r0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r1, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r6}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r2, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:42 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x0, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r1, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r2, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:42 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
dup(r0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r1, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r6}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r2, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:42 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x0, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r1, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r2, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:42 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:42 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
dup(r0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r1, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r6}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r2, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:43 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(0xffffffffffffffff, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r4=>0x0, ""/256, <r5=>0x0})
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r6}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r8=>0x0, <r9=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r10=>0x0, ""/256, 0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:43 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:43 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x0, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r1, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r2, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:43 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:43 executing program 2:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(0xffffffffffffffff, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r4=>0x0, ""/256, <r5=>0x0})
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r6}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r8=>0x0, <r9=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r10=>0x0, ""/256, 0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:43 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:43 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x0, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r1, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r2, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:44 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r0, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r2=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = dup(r3)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r5}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r2, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r1, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:44 executing program 2:
syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(0xffffffffffffffff, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r4=>0x0, ""/256, <r5=>0x0})
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r6}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r8=>0x0, <r9=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r10=>0x0, ""/256, 0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:44 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x0, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r1, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r2, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:44 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r0, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r2=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = dup(r3)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r5}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r2, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r1, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:44 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:44 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x0, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r1, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r2, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:45 executing program 2:
syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(0xffffffffffffffff, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r4=>0x0, ""/256, <r5=>0x0})
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r6}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r8=>0x0, <r9=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r10=>0x0, ""/256, 0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:45 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x0, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r1, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r2, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:45 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r0, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r2=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = dup(r3)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r5}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r2, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r1, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:45 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:45 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:45 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x0, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r1, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r2, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:45 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
dup(0xffffffffffffffff)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r0, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r2=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = dup(r3)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r5}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r2, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r1, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:45 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:46 executing program 2:
syz_open_dev$dri(0x0, 0x8000003, 0x0)
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(0xffffffffffffffff, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r4=>0x0, ""/256, <r5=>0x0})
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r6}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r8=>0x0, <r9=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r10=>0x0, ""/256, 0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:46 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:46 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x0, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r1, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r2, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:46 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
dup(0xffffffffffffffff)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r0, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r2=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = dup(r3)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r5}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r2, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r1, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:46 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
dup(0xffffffffffffffff)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r0, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r2=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = dup(r3)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r5}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r2, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r1, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:46 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:46 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
dup(r0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r1, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r6}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r2, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:46 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x0, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r1, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r2, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:46 executing program 2:
syz_open_dev$dri(0x0, 0x8000003, 0x0)
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(0xffffffffffffffff, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r4=>0x0, ""/256, <r5=>0x0})
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r6}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r8=>0x0, <r9=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r10=>0x0, ""/256, 0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:46 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:47 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
dup(r0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r1, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r6}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r2, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:47 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x0, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r1, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r2, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:47 executing program 2:
syz_open_dev$dri(0x0, 0x8000003, 0x0)
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(0xffffffffffffffff, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r4=>0x0, ""/256, <r5=>0x0})
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r6}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r8=>0x0, <r9=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r10=>0x0, ""/256, 0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:47 executing program 2:
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(0xffffffffffffffff, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r4=>0x0, ""/256, <r5=>0x0})
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r6}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r8=>0x0, <r9=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r10=>0x0, ""/256, 0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:48 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
dup(r0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r1, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r6}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r2, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:48 executing program 2:
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(0xffffffffffffffff, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r4=>0x0, ""/256, <r5=>0x0})
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r6}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r8=>0x0, <r9=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r10=>0x0, ""/256, 0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:48 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:48 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x0, 0x80000001, 0x3, 0x0, 0xa9})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r1, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r2, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:48 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00'}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:48 executing program 0:
read$msr(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
dup(r0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r1, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r6}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r2, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:48 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x0, 0x80000001, 0x3, 0x0, 0xa9})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r1, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r2, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:48 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:48 executing program 0:
read$msr(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
dup(r0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r1, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r6}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r2, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:49 executing program 2:
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x80000001, 0x3, 0x0, 0xa9})
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(0xffffffffffffffff, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r4=>0x0, ""/256, <r5=>0x0})
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r6}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r8=>0x0, <r9=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r10=>0x0, ""/256, 0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:49 executing program 0:
read$msr(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
dup(r0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r1, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r6}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r2, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:49 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x0, 0x80000001, 0x3, 0x0, 0xa9})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r1, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r2, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:49 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(0x0, 0x8000003, 0x0)
dup(r0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r1, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r6}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r2, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:49 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:49 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x0, 0x3, 0x0, 0xa9})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r1, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r2, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:49 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:50 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:50 executing program 2:
syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(0xffffffffffffffff, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r4=>0x0, ""/256, <r5=>0x0})
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r6}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r8=>0x0, <r9=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={<r10=>0x0, ""/256, 0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r0, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:50 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x0, 0x3, 0x0, 0xa9})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r1, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r2, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:50 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(0x0, 0x8000003, 0x0)
dup(r0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r1, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r6}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r2, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:50 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(0x0, 0x8000003, 0x0)
dup(r0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r1, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r6}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r2, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:50 executing program 1:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
r1 = dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r2, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r7}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r4, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r3, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:50 executing program 3:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000003, 0x0)
dup(r0)
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x96, 0x9, 0x1, 0x1, 0x0, 0x547, 0x7, 0x0, 0x3, 0x0, 0xa9})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r1, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80)={<r6=>0x0, ""/256, <r7=>0x0})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r8}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00)={0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005dd00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "9ff4972d6c5303"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r2, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

05:57:50 executing program 0:
read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/143, 0x8f)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
dup(r0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1)
syz_open_pts(r1, 0x101000)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x92)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = dup(r4)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
socket$netlink(0x10, 0x3, 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db80))
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="182f0000000000000000000000080eff07fbef8c95ef30d8f1f32ac3054d45e8ac75d6ae0667d436f3d5cbb5112751a745ca5a97058ed5a33c95e4687cabebd1311a7ed97a421810c8383b6e8ffc95bb5f85ee1efc498ac494010721065dd23aa322e0fc97472ee501fa9c08f8d95fa82c8c483c6f432479d8a658822f71a4af37ddc95d5207a748d3fea0a1082a9292c07b2a6d6c98d9aa63999a5f01e4580d616e724cad5e3054c5f14c329c5a84734641e9ada925813f95e8d378b28549239bae68d5f19ce8d1c60395b3052a0f22e74b8e0e82d91ac4cc98806fafc7a51f4bde69d349"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r6}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005db00))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005dd80))
tkill(0x0, 0x0)
io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xd, 0x0, 0x88, r2, &(0x7f0000000000)="98", 0x3e80000700, 0x1000000, 0x0, 0x10}])

[ 2165.864708][T21890] ==================================================================
[ 2165.872538][T21890] BUG: KASAN: slab-use-after-free in slip_open+0xef7/0x1210
[ 2165.892389][T21890] Read of size 1 at addr ffff88804be52d71 by task syz-executor.3/21890
[ 2165.902740][T21890] 
[ 2165.904694][T21890] CPU: 3 PID: 21890 Comm: syz-executor.3 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0
[ 2165.912404][T21890] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[ 2165.919282][T21890] Call Trace:
[ 2165.922164][T21890]  <TASK>
[ 2165.924612][T21890]  dump_stack_lvl+0xd9/0x150
[ 2165.928277][T21890]  print_address_description.constprop.0+0x2c/0x3c0
[ 2165.933448][T21890]  ? slip_open+0xef7/0x1210
[ 2165.936669][T21890]  kasan_report+0x11c/0x130
[ 2165.940066][T21890]  ? slip_open+0xef7/0x1210
[ 2165.944010][T21890]  slip_open+0xef7/0x1210
[ 2165.947148][T21890]  ? lock_downgrade+0x690/0x690
[ 2165.951513][T21890]  ? sl_uninit+0x20/0x20
[ 2165.955615][T21890]  ? down_write+0x14f/0x200
[ 2165.959735][T21890]  ? sl_uninit+0x20/0x20
[ 2165.963519][T21890]  tty_ldisc_open+0x9b/0x110
[ 2165.967763][T21890]  tty_set_ldisc+0x2f5/0x690
[ 2165.971782][T21890]  tty_ioctl+0x67e/0x16e0
[ 2165.975570][T21890]  ? tty_release_struct+0xf0/0xf0
[ 2165.979487][T21890]  ? xfd_validate_state+0x5d/0x180
[ 2165.982829][T21890]  ? __fget_files+0x26a/0x480
[ 2165.985917][T21890]  ? tty_ioctl+0x16e0/0x16e0
[ 2165.988830][T21890]  tty_compat_ioctl+0x2c3/0x4a0
[ 2165.992061][T21890]  ? tty_ioctl+0x16e0/0x16e0
[ 2165.995309][T21890]  __do_compat_sys_ioctl+0x255/0x2b0
[ 2165.999704][T21890]  __do_fast_syscall_32+0x65/0xf0
[ 2166.003962][T21890]  do_fast_syscall_32+0x33/0x70
[ 2166.008005][T21890]  entry_SYSENTER_compat_after_hwframe+0x70/0x82
[ 2166.012842][T21890] RIP: 0023:0xf7fc1579
[ 2166.016326][T21890] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[ 2166.031133][T21890] RSP: 002b:00000000f7fbc5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[ 2166.038312][T21890] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000005423
[ 2166.047631][T21890] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000000
[ 2166.055059][T21890] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2166.061866][T21890] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[ 2166.068418][T21890] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2166.076097][T21890]  </TASK>
[ 2166.079207][T21890] 
[ 2166.081536][T21890] Allocated by task 21884:
[ 2166.085519][T21890]  kasan_save_stack+0x22/0x40
[ 2166.089600][T21890]  kasan_set_track+0x25/0x30
[ 2166.093536][T21890]  __kasan_kmalloc+0xa2/0xb0
[ 2166.097350][T21890]  __kmalloc_node+0x61/0x1a0
[ 2166.101299][T21890]  kvmalloc_node+0xa2/0x1a0
[ 2166.104932][T21890]  alloc_netdev_mqs+0x9c/0x1250
[ 2166.108984][T21890]  slip_open+0x371/0x1210
[ 2166.112565][T21890]  tty_ldisc_open+0x9b/0x110
[ 2166.116836][T21890]  tty_set_ldisc+0x2f5/0x690
[ 2166.121519][T21890]  tty_ioctl+0x67e/0x16e0
[ 2166.125693][T21890]  tty_compat_ioctl+0x2c3/0x4a0
[ 2166.129972][T21890]  __do_compat_sys_ioctl+0x255/0x2b0
[ 2166.134647][T21890]  __do_fast_syscall_32+0x65/0xf0
[ 2166.139177][T21890]  do_fast_syscall_32+0x33/0x70
[ 2166.143568][T21890]  entry_SYSENTER_compat_after_hwframe+0x70/0x82
[ 2166.148715][T21890] 
[ 2166.150735][T21890] Freed by task 21883:
[ 2166.154147][T21890]  kasan_save_stack+0x22/0x40
[ 2166.158296][T21890]  kasan_set_track+0x25/0x30
[ 2166.162481][T21890]  kasan_save_free_info+0x2e/0x40
[ 2166.166901][T21890]  ____kasan_slab_free+0x160/0x1c0
[ 2166.171022][T21890]  slab_free_freelist_hook+0x8b/0x1c0
[ 2166.175827][T21890]  __kmem_cache_free+0xaf/0x2d0
[ 2166.180172][T21890]  kvfree+0x46/0x50
[ 2166.183532][T21890]  device_release+0xa3/0x240
[ 2166.187747][T21890]  kobject_put+0x1c2/0x4d0
[ 2166.191484][T21890]  netdev_run_todo+0x762/0x1100
[ 2166.195455][T21890]  slip_close+0x165/0x1c0
[ 2166.198882][T21890]  tty_ldisc_close+0x110/0x190
[ 2166.203052][T21890]  tty_ldisc_kill+0x94/0x150
[ 2166.206937][T21890]  tty_ldisc_release+0xe5/0x2a0
[ 2166.210964][T21890]  tty_release_struct+0x24/0xf0
[ 2166.215082][T21890]  tty_release+0xd9e/0x1380
[ 2166.218722][T21890]  __fput+0x27c/0xa90
[ 2166.222086][T21890]  task_work_run+0x16f/0x270
[ 2166.225862][T21890]  exit_to_user_mode_prepare+0x210/0x240
[ 2166.230317][T21890]  syscall_exit_to_user_mode+0x1d/0x50
[ 2166.234803][T21890]  __do_fast_syscall_32+0x72/0xf0
[ 2166.238823][T21890]  do_fast_syscall_32+0x33/0x70
[ 2166.242971][T21890]  entry_SYSENTER_compat_after_hwframe+0x70/0x82
[ 2166.248260][T21890] 
[ 2166.250264][T21890] The buggy address belongs to the object at ffff88804be52000
[ 2166.250264][T21890]  which belongs to the cache kmalloc-cg-4k of size 4096
[ 2166.261850][T21890] The buggy address is located 3441 bytes inside of
[ 2166.261850][T21890]  freed 4096-byte region [ffff88804be52000, ffff88804be53000)
[ 2166.272914][T21890] 
[ 2166.274879][T21890] The buggy address belongs to the physical page:
[ 2166.280182][T21890] page:ffffea00012f9400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4be50
[ 2166.288974][T21890] head:ffffea00012f9400 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 2166.295472][T21890] memcg:ffff88805af15d41
[ 2166.298662][T21890] flags: 0x4fff00000010200(slab|head|node=1|zone=1|lastcpupid=0x7ff)
[ 2166.304947][T21890] raw: 04fff00000010200 ffff888012450280 ffffea0001267800 dead000000000002
[ 2166.311786][T21890] raw: 0000000000000000 0000000000040004 00000001ffffffff ffff88805af15d41
[ 2166.318854][T21890] page dumped because: kasan: bad access detected
[ 2166.324606][T21890] page_owner tracks the page as allocated
[ 2166.329477][T21890] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 21592, tgid 21592 (cmp), ts 2154607866515, free_ts 2154191927652
[ 2166.347743][T21890]  get_page_from_freelist+0x1190/0x2e20
[ 2166.352506][T21890]  __alloc_pages+0x1cb/0x4a0
[ 2166.356048][T21890]  alloc_pages+0x1aa/0x270
[ 2166.360172][T21890]  allocate_slab+0x25f/0x390
[ 2166.364652][T21890]  ___slab_alloc+0xa91/0x1400
[ 2166.368969][T21890]  __slab_alloc.constprop.0+0x56/0xa0
[ 2166.373481][T21890]  __kmem_cache_alloc_node+0x136/0x320
[ 2166.377882][T21890]  __kmalloc_node+0x51/0x1a0
[ 2166.381824][T21890]  kvmalloc_node+0xa2/0x1a0
[ 2166.385544][T21890]  seq_read_iter+0x7fb/0x12d0
[ 2166.389919][T21890]  proc_reg_read_iter+0x1ff/0x2d0
[ 2166.393974][T21890]  vfs_read+0x681/0x930
[ 2166.397439][T21890]  ksys_read+0x12b/0x250
[ 2166.401327][T21890]  do_syscall_64+0x39/0xb0
[ 2166.404970][T21890]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2166.409746][T21890] page last free stack trace:
[ 2166.413653][T21890]  free_pcp_prepare+0x5d5/0xa50
[ 2166.417175][T21890]  free_unref_page+0x1d/0x490
[ 2166.420829][T21890]  __unfreeze_partials+0x17c/0x1a0
[ 2166.425275][T21890]  qlist_free_all+0x6a/0x170
[ 2166.429200][T21890]  kasan_quarantine_reduce+0x192/0x220
[ 2166.433880][T21890]  __kasan_slab_alloc+0x63/0x90
[ 2166.437983][T21890]  kmem_cache_alloc+0x17c/0x3b0
[ 2166.441934][T21890]  getname_flags.part.0+0x50/0x4f0
[ 2166.446249][T21890]  getname_flags+0x9e/0xe0
[ 2166.449669][T21890]  user_path_at_empty+0x2f/0x60
[ 2166.453498][T21890]  __ia32_sys_umount+0xfc/0x190
[ 2166.457626][T21890]  __do_fast_syscall_32+0x65/0xf0
[ 2166.461825][T21890]  do_fast_syscall_32+0x33/0x70
[ 2166.465715][T21890]  entry_SYSENTER_compat_after_hwframe+0x70/0x82
[ 2166.470791][T21890] 
[ 2166.472690][T21890] Memory state around the buggy address:
[ 2166.477377][T21890]  ffff88804be52c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2166.483687][T21890]  ffff88804be52c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2166.490136][T21890] >ffff88804be52d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2166.496630][T21890]                                                              ^
[ 2166.503129][T21890]  ffff88804be52d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2166.510338][T21890]  ffff88804be52e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2166.516930][T21890] ==================================================================
[ 2166.536680][T21890] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 2166.542958][T21890] CPU: 2 PID: 21890 Comm: syz-executor.3 Not tainted 6.3.0-rc6-syzkaller-00168-g95abc817ab3a #0
[ 2166.552007][T21890] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
[ 2166.559415][T21890] Call Trace:
[ 2166.562039][T21890]  <TASK>
[ 2166.564463][T21890]  dump_stack_lvl+0xd9/0x150
[ 2166.568291][T21890]  panic+0x688/0x730
[ 2166.571561][T21890]  ? panic_smp_self_stop+0x90/0x90
[ 2166.575665][T21890]  ? preempt_schedule_thunk+0x1a/0x20
[ 2166.580445][T21890]  ? preempt_schedule_common+0x45/0xb0
[ 2166.584975][T21890]  check_panic_on_warn+0xb1/0xc0
[ 2166.589362][T21890]  end_report+0xe9/0x120
[ 2166.592893][T21890]  ? slip_open+0xef7/0x1210
[ 2166.596698][T21890]  kasan_report+0xf9/0x130
[ 2166.600434][T21890]  ? slip_open+0xef7/0x1210
[ 2166.604348][T21890]  slip_open+0xef7/0x1210
[ 2166.607754][T21890]  ? lock_downgrade+0x690/0x690
[ 2166.611781][T21890]  ? sl_uninit+0x20/0x20
[ 2166.615340][T21890]  ? down_write+0x14f/0x200
[ 2166.618936][T21890]  ? sl_uninit+0x20/0x20
[ 2166.622141][T21890]  tty_ldisc_open+0x9b/0x110
[ 2166.625378][T21890]  tty_set_ldisc+0x2f5/0x690
[ 2166.628701][T21890]  tty_ioctl+0x67e/0x16e0
[ 2166.632069][T21890]  ? tty_release_struct+0xf0/0xf0
[ 2166.635864][T21890]  ? xfd_validate_state+0x5d/0x180
[ 2166.639608][T21890]  ? __fget_files+0x26a/0x480
[ 2166.643269][T21890]  ? tty_ioctl+0x16e0/0x16e0
[ 2166.647147][T21890]  tty_compat_ioctl+0x2c3/0x4a0
[ 2166.650941][T21890]  ? tty_ioctl+0x16e0/0x16e0
[ 2166.654649][T21890]  __do_compat_sys_ioctl+0x255/0x2b0
[ 2166.658822][T21890]  __do_fast_syscall_32+0x65/0xf0
[ 2166.663183][T21890]  do_fast_syscall_32+0x33/0x70
[ 2166.667121][T21890]  entry_SYSENTER_compat_after_hwframe+0x70/0x82
[ 2166.672459][T21890] RIP: 0023:0xf7fc1579
[ 2166.675549][T21890] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[ 2166.690128][T21890] RSP: 002b:00000000f7fbc5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[ 2166.696041][T21890] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000005423
[ 2166.702088][T21890] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000000
[ 2166.708223][T21890] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2166.714436][T21890] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[ 2166.720557][T21890] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2166.726997][T21890]  </TASK>
[ 2166.730755][T21890] Kernel Offset: disabled
[ 2166.734718][T21890] Rebooting in 86400 seconds..

VM DIAGNOSIS:
05:57:51  Registers:
info registers vcpu 0
RAX=1ffff1100278b09e RBX=0000000000000001 RCX=0000000000000000 RDX=ffff888017208000
RSI=ffffffff81b3e088 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90001faf5a0
R8 =ffff888013c584f0 R9 =0000000000000004 R10=0000000000000003 R11=0000000000000000
R12=dffffc0000000000 R13=ffff888013c585e0 R14=0000000000000003 R15=ffff888013c58530
RIP=ffffffff81b3ddec RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802c600000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff2010e09b0 CR3=0000000071d82000 CR4=00150ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffffffffffffffffffff XMM01=4b5f5455504e495f4449006b636f6c62
XMM02=ffffffffffffffffffffffffffffffff XMM03=000000ff00000000000000ff000000ff
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=ff000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=7261726f706d6574002a3f005b3f2a00 XMM09=00000000000000000000000000000000
XMM10=737326855b670363737326800437852b XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000696141 RBX=0000000000000001 RCX=ffffffff89ffeb05 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffff888013d1d7c0 RSP=ffffc9000045fe10
R8 =0000000000000001 R9 =ffff88802c736cab R10=ffffed10058e6d95 R11=0000000000000000
R12=ffffed10027a3af8 R13=0000000000000001 R14=ffffffff8e775ad0 R15=0000000000000000
RIP=ffffffff8a00037f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802c700000 ffffffff 00c00000
LDT=0000 0000000000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffef81ab088 CR3=0000000071d82000 CR4=00150ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000004101e16290d35f07 XMM03=32322035312e322e302e303120323638
XMM04=00000000000000050000000000a4f8e2 XMM05=00000000000000000000000001f012f0
XMM06=00000000000000050000000000a4f8e7 XMM07=00000000000000000000000001f012ee
XMM08=00000000000000060000000000a522ec XMM09=00000000000000000000000001f012eb
XMM10=00000000000000030000000000a4c57b XMM11=00000000000000000000000001f012ec
XMM12=00000000000000060000000000a52178 XMM13=00000000000000000000000001f012ea
XMM14=00000000000000040000000000a4d8dd XMM15=00000000000000000000000000000000
info registers vcpu 2
RAX=1ffff920007ddfb2 RBX=ffffc90003eefd78 RCX=0000000000000001 RDX=000000000000c350
RSI=00000000000f4240 RDI=ffffc90003eefd78 RBP=ffffc90003eefd38 RSP=ffffc90003eefc70
R8 =0000000000000001 R9 =ffff88801c15801b R10=ffffed100382b003 R11=0000000000000000
R12=0000000000000001 R13=dffffc0000000000 R14=ffffc90003eefdb8 R15=ffff88801c158000
RIP=ffffffff81724df0 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff88802c800000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 00000000 00000000
TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00000000f734e1b0 CR3=000000006e17d000 CR4=00150ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000000000000000000000000001a4 XMM01=bdc4ea6583fc73fadb71ff78bea81497
XMM02=38d6b5b3dfd4023d20a0ebbe225e9f3a XMM03=f7a2e9ac31d0772b3f8a58752b8c7358
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=0d0c0f0e09080b0a0504070601000302 XMM07=0e0d0c0f0a09080b0605040702010003
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 3
RAX=0000000000000065 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff848291c5 RDI=ffffffff9206f760 RBP=ffffffff9206f720 RSP=ffffc90002c1f6c8
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000064616552
R12=0000000000000000 R13=0000000000000065 R14=ffffffff84829160 R15=0000000000000000
RIP=ffffffff848291ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff88802c900000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 00000000 00000000
TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000030021000 CR3=000000004d340000 CR4=00150ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00ff000000000000000000000000ff00 XMM03=2064656c696166203a626367736d7663
XMM04=ffffffffffffffffffffffffffff0000 XMM05=ffffffffffffffffffffffffffff0000
XMM06=00000000000000000000000000000a61 XMM07=353932373639343932343d7365732035
XMM08=2500656c6f736e6f632f7665642f000a XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000