sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xa50}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = accept(r0, 0x0, &(0x7f0000000180)) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r1) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4a}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'caif0\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x80}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x801}, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x71100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r4, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x79b}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000c894}, 0x20000000) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8000) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/module/raid0', 0x4800c1, 0x2) ioctl$SIOCPNDELRESOURCE(r5, 0x89ef, &(0x7f0000000680)=0x1) ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f00000006c0)={0x0, 0x745f, 0x0, [0x5, 0x5, 0x6, 0x6, 0x4], [0x6, 0xd4d6, 0xff, 0x8, 0xfffffffffffffff9, 0x6, 0x0, 0x81, 0x8, 0xe4c, 0x5ae, 0x6, 0x8, 0x10001, 0x5, 0x400, 0x7, 0x6, 0xcf4f, 0x4, 0x3e2, 0x53df, 0xff, 0x6, 0x9, 0xff, 0x100000001, 0x0, 0x6, 0x0, 0x8, 0x80, 0x5, 0x1dcd, 0x290, 0x401, 0xffffffffffffff80, 0x8, 0x80000000, 0x6, 0xc783, 0x4, 0x8, 0x6, 0x0, 0x2, 0x8, 0x9, 0x7, 0x7, 0x4, 0x3ff, 0x6, 0x0, 0x4f, 0xff, 0xad, 0x1ff, 0x0, 0x7f, 0x0, 0x9, 0x3, 0x7, 0x1, 0x1000, 0xfffffffffffffff8, 0x7, 0x6, 0x3f, 0xfffffffffffffff9, 0x200, 0x10001, 0x100, 0x4, 0xfffffffffffffffe, 0x1700, 0x8, 0x8, 0x7f6, 0x19f, 0x8, 0x400, 0xb7f3, 0x1, 0x8, 0xe767, 0x1, 0x4, 0x5, 0x9, 0x5, 0x7, 0x4, 0x68, 0x3, 0x2, 0xb0, 0x1, 0x1, 0x10001, 0x9, 0x7, 0xffff, 0x5, 0x0, 0x20, 0x7, 0x0, 0x1, 0x8, 0xffffffff, 0x2, 0x0, 0x7, 0x1, 0xffff, 0x8000, 0x71, 0x20, 0x4]}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000001b00)={r6, r2, 0x732, 0x1000, &(0x7f0000000b00)="1eeda09f3c95bb422b67568adf2070ec9cfbd67f5e437ae17e2f71525abc61d3e0101406b7c499e66c0ea37fa2c7cea46e892b03b90592940f5a734293c70de7b52d30a83fb5a3dc5ca0526222584623b9429671665b3bf5d2aced7939e132cc65b861757cbdfd65100021c1b0ca72f4b6967e59c5793f47a32f292b4799b66f5db27fd041b3dcad258198376e4e51524e8b7bcf56aafa4f0de36578c2dd9976b359d4fb899ae247a6fae4aa94c9b88b316b8967c3a32ef10709ecef6337494dc3794f2c679447dd19af434f4f5a2b60470752a2233aa3d527591fa597414312e8a7611fc0288cf994040cb11ed1a0ddfe195b4c0e03dae45bc3f0dea63119556d774ddada2b5de0f454a164685c7e5e4b173dea7e1829e0aabf4e57747dd74c9b3b26bcd4cb1aad7b8ef72f2e2c9dd51ba8baf0f8cc9a76495fd0e2094be072c1edf7cb8728f75b94e974d871a46c9308a469d8e13074973cc4942ae647cf50b5f1736da1e64d309e56aa331f0166c830113d500464dea256e53d0ca1cdcff1ef85de717581cc687e11c522b2b812a51a5a23f94752d75590729f44e8ee322babc7b923ec7592d69a1e33fe677cdce47e0bd8929b5a37ae90a375f3344f1c5a97b40d0b0b126c7b0c7d32b88e421758ab39fc2620f9066c66f6eb366c94b75ecd7686c4ce36cc378253cf6071adca311dfba59310abcd0e79366ac9ffd46c52794bfb7c418fc65a1d12d63ff210d283bc272b0bf38ff2ac7eff84ae814a573cedbe3b3501651f9a7c9b9dc908a471b96aece294f7f4af59a24237abf9389f5c61b25759d10c16c24221e3b911e6bdb447acd321b41200b54fbf236091a71d8a80a944a66e9c729fff934f734a56336b4c8c71d1b01bc7cc5f10a904ef80d446d84517f5149e4b4bb1f964e0d46f713d7a1b8998760816dbc2f25458eabfa0c8d24a0262aeea2e33f5e3d5c29d2e12eb6e42391f7e276a648388986ce09a49419cdf80555099c047afb26425bea743d3f0160dd3854b5a0fab35a9795144b1740a2b093dd9fca72beeff2d5a84bde705e94846dd6fc886d91be7cc923e0a237e8af1f62f2df2f273095de1ff93b85f9ebe03b2bf1f7080cd640a0139763b5d95fd0c5393a03b6d0b5cc14ed308adaa9e4340615f6fa43b47f49b41350a4bb75960cb0ca3bd83ee445daff3567d9a159d76bdff665dacf0728632008aeb2b3b2a2c9587ad4d11f2f40af1238cbd100669a2be93c2be977c1d5f4eebc4f022a2cfa77248459dcbc9435a573fd7308d55efef923510c1af1594aa82db6e2bb5e1332a71e611c06e63aac437cac5fd5652a86d3c23e39323826bf88a0dbb096c7ec7dde1afda06cc5709ba2ebbb76d47627952da2f85b92e3c172dedbe06f38e983359ce87835451b4d92170585b3263eacccf2e24508fb152379e8e431549b7e993cda36b3253019f21f74fe6330f1aefa1896284928965a183177f51154eb012f752cb0fbdd18cec8d4b96c28f7b8d9409cefa32738ca7a8d40148f7ba68c00b7715ca0530953cdcbd9bc3fcb2e2d57cd554065e1d4e8a92677ac879f22beaed8fe8713940f623070e845c72f29bbdaff75257a07a3d3fbe70f38ea0a5d6144cf428def39528de32f9b9fc18f36961db0cbc8a07403a4c246c8592033910d0eab7a147ec071dd77157b68d3ced54e96928dffe929b23c024b369e8985c6d1be1d351b1e2917f05c282ff48fd58113cd8cb534eb35ff6ce98b7196433ab37428e3bbf6acf44230579ed1091cd937564cb124ee266fe8b6a2c76cb75c8421ad22cbd16d191d33bbee4481b7450e0435ba357d506c3ea5abd6523aa90bcc7ce585c8b810ab7d42b49ad50357ca40fbd9183030e609e94092b9c97c3f41014d42d029f35d8380c7034d296d32fa37c774fc6f5c05ca874f81c15f8a467563abc055307c64a358c0f41fe9cc55cc70cab8b89ab929b3159b176f16b188695e92ef853ad03a5ea41b6aa4a1b324262a95280b39034893d633a63252694fa31233f20bb3cd7c82ec4c32891811b79e981d4266d6175a0ad49b40e4af88ab61727198f1395be67abdfad16b52ea48d74556c74848391e574a128fc2321d1ea0cee7ab30c7f3d9c94502abf11f30e593b64398d317dcdf57b91f3389a2370ec00f8485798f68435f4276cee15f1ae953bc6996d7b99f939b524f6be2addd2292f5a4dc223803984e1c9b6b2c61f5166472a0e31d2ae66b08f71036760da3df482979e56c5dcd296e3f3e6bd04be071b504278bff9d1cd5929c8bdc36c71251744ec3461e293982c8ffb75983e0d488b9b6555aca7dd694bdcbef2b0c4161b167216bcbd83dc77a15902e69d033c01db151177c20222a7361977e85e7f4c632afcca695ef8c95b39b9d39f1620c0ea91ac14f8bbf60f4236e57d4f568f0c4a946c146bc1b556d3aee1a36dbb1cce54fda9b3e5c88766ed5ee1e91e6b87a9bd45324b6ab968ac61847b9c7f5af5dc1ee9de765056c0c80a45dcce9d4e2b978611934b342345d3c4bafd9869659050b1acda54e1b28077f516d117e890a27ed946f2a8e17a40cd4bdccb352ab9402925d0814197258d77ceece4d7984f69e08384117f6c9c6c911935f5b2777c55716c0a87f8fc6a6814bf39946f5e1334d033d05e6a15a47c10a35e2d6486a20b87e575f88848d7b8b89a5b16e9b8dabbe89d045269bdb13828e7211f08089f01fa92bf262fa840c1913d1536622e8234c73112f0ea3e7a6138fadf438aabbbf5527b06a7741a3053b92503adb2efb50fc52840cc691a4cc2bd5a77c2f5be4ef2556811a1179ff56c48f10408921a5e263554eae6d7ab38758a0bd7a098946987baeb1fee85cc1d4a9c369fe7b500a5818ad6500c1d960b929791380aa0f62ed047116f936771a285ba747203b2a6b35d1b07c9d4f4e4f5483edea0f67e2e9ebf460b4e9c5f1c66fed1b3c07df4324ddb121432befcf5a3a5cb13623d0f97a943783abfe84a0c9e193a8794c7e8eb11a0c65e6c03d04f9460ed49b360015d7304e2666e96f8d8903e754958822323b180ddb015d0454b6b57f13d7b25cd9b7ffa0c4ee52f609b8f609ed976932270687a3eee1557c4856d1c932821091c2032403be2815468a9374b2e9224a7014d172c1b6ac0f3dbd5fdc4ece5b5fe224a2ec25750c4a52115c1292c083736b4a683640d6bda285ed522d2e4ea4b06ee301e9b28116afb5d99ae5b1dc1254f89f713b6ebe4e7ea57e4c5e7a5d5ef7287cc20656c1c836405d88d1bd4ce77b659f6863a1adb7d84fe2827f958695515706dc382b218b07cbabc6b5c359dc08a15eab5477c8b3e9a0619841260562e5cfd4e282af9fbf2a80e53b56cb010f030da5ec341c989cd0a1d6e5271def4852c314d7b61527239c1e583cf0c55031acb4991fff1de2958177873185e8952158dacdd63dba6ad3256676bd8e326de2253bd1c05607e9160649cfd072179d4cf290a9fc5dae649760d532eee81dbccbd9067305402740c41ec6a0c2547ef8dbf882ea3589e129062483cb28eb55e48fb9eb7fc0517605ca32d63d24dea104e283f3e54a77df7cd9209d09e96b40ff921ad347164e5cd3a01553ad7fae656fc04affa44ec6631f18c5b0488387e0da882a2623cdbe68eace8ec7f519b4a754c906d74a8e9dba22c7d9523f49570eb5c71e830cf94f8d69cfe8728f332f6670c3d591e7e716f339c7ac36624632148ff3ee35ca2d0b2014a080f3f1ae54dfde91a9027092f0a53391c357cbff30ce550f837d3e5ab96681b472da5dbcb0deaf6fa99f9e75046fd2dc5b734de71ea1149cf09c0fab875efd86c2e4b0a11a4f6881b31eb67607d9a3d7aab713a1742a90d9bb7141b408b38524c465ce88fdbcb8f2dbeeeda343769e3a239c4fb4b9b91470fe3abdf24364f2761a893a80a80f2da6ec93a37f71266458c04c9f233ebc487e24bafa7cee66b0c25578f3dbb29dc30033dcd67b1a0c84f8f69fe712329787aa305fc127107d0f2e56731014c2463c2a7a4ed90fe333752520901407ac852ac834513f80cf7477d54db6a46c6795a36625f184e6bbd0a40985c20d74e4fb78c5bc65031355c541a86d1a82c0b08f63872c5af7d083cce84af0de8cc36ba1b749f7487ad434ae5d0bd1b5da4b84b753b6669a496675daf189801ea113700aaab800f83af2fcdd23cc7ccd0b8f1d2403fa6cc58e824b271e1817b820176c1b4e6b9f690aea92a0768489719c3abf5372e3acd05907d92fe721431c92cf4e5dfe55a7650eecc1361c1fa1bacdd59d4eda7d5bcc00fbacae3817ec8146c8b305e142e2be63f9775a4c7aa2801d014acbf93b0ecea7582b52fe11978857dbe97f69ac16a6d226a26ac093bf97624b912b63803d2a855b18398333a211abfb7aa6d5f605fa1f3a75f90da80b5dc4f2b8b177aecc29abb7504c5d987247a00fad6737be397d07d3439f70b96d2341bbea44cbb3c560b3d97664ee1768b5ae0aa18b179dad4018b6396e9b7702e5e8416ab06ace1141d7088e6766366e110f314a3a8e6239638398e3dfaada0c0f41c079f0ce8049e8ef51f62694cff2ef033da39d27e23036f289b25fc79f0c095674f74aacf77e0ffbfb8fc63249dc5570dcf91462f650db2b027e6ad469fb90d9439dedcd97f535ea135ca4026792ef91dc76a1ebdb095b67985a9a24fb0c9d2251082b87a46199346bc32b31e721b621813beb95b4bc5082a00bb087b28756015598a262358af45a259d3094f4200f5c1bf4b5ac61bafb1cc8b00aaf9dcceca243fa985db289a9699050ea51cde49a80f3af013f9c59b6969a1e110ea301662352ad70776b9b1ff821dfc88877594445845361ef0c038697c4567593448a78da6040dda591ec764ffbe9ae93cc0726fd94c69588af2f50c2a68cf64cb3ed027d66c6fd90b463ce5a4f6997e920ac198426cbf2c68af54d0c352747cf01ea75afc3cd0724443d280776569aaac86d98dcb216ae84944fe8d43099ecd2140fb690f5945ccac980aa3190ed6ff464789cb4495e48a5de802038d6e070608f349e7eaf008aac489087ddb2bf78b23ca32cb49e6c5687170d6c83c70c49afcb68cde0e0e4aecf329505685bcff2d1cadf2a155fb396f809aa89e12b6bb95046aeede4e96adf23083dcbf6c976f8229c2f03b55559ebeb4070eda2e0fa9d54f45df1abdbbfa84c4e6b011ec1ed0c32963b69421cc2071c8e127d36aa9ca05c481ebb9fd6bfb6f22c2698d1a00dd9b935663664451726c3bb9bfba0c5f4f7569f29cc19a6564e3454c8cb0812e2da9ebefb8d122ade0eabda317b919deeea414643edc56e7b97b68bfbb91672aa055f37c78880515ee494d18445de40d4f211adae55da4772817ca5e616f162a8001330250ee7eb3012cf043d144325708849f073ca6d3e3a1cd8efc76f822efd8540637e47dc124c386cdc8f930180128707ce460991abd9195e05270958039d4e837c20d99ae9f54795200db017d6c6a45ccd6bb87db33d712efd4f849d3dcf6e20e32640ca5b9b46aa2c63955441639bf32f294154cd70e1804cd9a549760c2c8476ba7f82d7b7556cf89eedb11a7264ceb9fc4cbedabf343c97827ca2d3eb21947c576ad7949c5c28ad17436191babd777622088a6eed74d95d64f59c01a046b53b39bacfc8b785da9e0b5f551623e18d90152eefbf9b457a46ea299d716667619a9a897218d06a93ba12837d7cf83d59e9b091f8c12ef4867157d441c7ff78be18d49beaa0dd0b209c06a8cd8e58e4b40042a275bed8d0c", 0xc8, 0x8a, 0xfff, 0x200, 0x8, 0x2, 0x80, 'syz0\x00'}) 06:12:54 executing program 1: r0 = socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x6, 0x1) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_es_remove_extent\x00'}, 0x10) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000000c0)={{r0}, 0x0, 0x10, @unused=[0x8, 0x101, 0x81, 0x1], @devid}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000010c0)={'wg1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000001100)={0x5, 0xfff, 0x40, 0xffffff01, 0x4}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f0000001180)={0x7ff, 0x800, 0x1, @random="27bcc814ca2f", 'nr0\x00'}) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0xc0, &(0x7f00000011c0)="136b0aa096621c982a7c29aa9c298434187436bbdcb4c1c5dae56b37b27bd58e2f4bc899103af5bdd7aef4f6619f56d489f42fedc384d9a0af454074328dbec2b3981f5f", 0x44) syz_genetlink_get_family_id$nl802154(&(0x7f0000003240), r2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000003340)='/sys/bus/nvmem', 0x0, 0x24) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, &(0x7f00000046c0)) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000004740)=0x7, &(0x7f0000004780)=0x2) 06:12:54 executing program 2: socketpair(0x1e, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xa50}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = accept(r0, 0x0, &(0x7f0000000180)) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r1) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4a}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'caif0\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x80}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x801}, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x71100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r4, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x79b}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000c894}, 0x20000000) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8000) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/module/raid0', 0x4800c1, 0x2) ioctl$SIOCPNDELRESOURCE(r5, 0x89ef, &(0x7f0000000680)=0x1) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r6, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:12:54 executing program 5: socketpair(0x1e, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xa50}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = accept(r0, 0x0, &(0x7f0000000180)) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r1) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4a}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'caif0\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x80}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x801}, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x71100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r4, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x79b}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000c894}, 0x20000000) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8000) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/module/raid0', 0x4800c1, 0x2) ioctl$SIOCPNDELRESOURCE(r5, 0x89ef, &(0x7f0000000680)=0x1) ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f00000006c0)={0x0, 0x745f, 0x0, [0x5, 0x5, 0x6, 0x6, 0x4], [0x6, 0xd4d6, 0xff, 0x8, 0xfffffffffffffff9, 0x6, 0x0, 0x81, 0x8, 0xe4c, 0x5ae, 0x6, 0x8, 0x10001, 0x5, 0x400, 0x7, 0x6, 0xcf4f, 0x4, 0x3e2, 0x53df, 0xff, 0x6, 0x9, 0xff, 0x100000001, 0x0, 0x6, 0x0, 0x8, 0x80, 0x5, 0x1dcd, 0x290, 0x401, 0xffffffffffffff80, 0x8, 0x80000000, 0x6, 0xc783, 0x4, 0x8, 0x6, 0x0, 0x2, 0x8, 0x9, 0x7, 0x7, 0x4, 0x3ff, 0x6, 0x0, 0x4f, 0xff, 0xad, 0x1ff, 0x0, 0x7f, 0x0, 0x9, 0x3, 0x7, 0x1, 0x1000, 0xfffffffffffffff8, 0x7, 0x6, 0x3f, 0xfffffffffffffff9, 0x200, 0x10001, 0x100, 0x4, 0xfffffffffffffffe, 0x1700, 0x8, 0x8, 0x7f6, 0x19f, 0x8, 0x400, 0xb7f3, 0x1, 0x8, 0xe767, 0x1, 0x4, 0x5, 0x9, 0x5, 0x7, 0x4, 0x68, 0x3, 0x2, 0xb0, 0x1, 0x1, 0x10001, 0x9, 0x7, 0xffff, 0x5, 0x0, 0x20, 0x7, 0x0, 0x1, 0x8, 0xffffffff, 0x2, 0x0, 0x7, 0x1, 0xffff, 0x8000, 0x71, 0x20, 0x4]}) socket$vsock_stream(0x28, 0x1, 0x0) 06:12:54 executing program 3: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name, &(0x7f0000000080)=0x10, 0x800) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0xcb76}]}, 0x1c}, 0x1, 0x0, 0x0, 0x91}, 0x80) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000200)={0xfffffffffffffffc, [], 0x1f, "7ed065e792b474"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001200)) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x2, 0xffff, 0x0, 0x7f, 0x6, 0xa3be, 0x1ff, 0xca7f, 0x7f, 0xfffff220, 0x6, 0x2, 0x80000001, 0x7fff}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000002400)={0x3, [], 0x0, "746c2bc77daf6b"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000003400)={0x900, [], 0x8, "52e30834a94e06"}) 06:12:54 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/vt', 0x140, 0x0) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x2, 0x1}, 0x2}}, 0x10) r1 = io_uring_setup(0x509a, &(0x7f0000000080)={0x0, 0xb3fa, 0x1, 0x1, 0x18e, 0x0, r0}) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x4010, r1, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0x20010, r0, 0x10000000) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x22500, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000001c0)={{r2}, 0x0, 0x16, @inherit={0x58, &(0x7f0000000140)={0x0, 0x2, 0x5, 0x1, {0x18, 0x4, 0x5, 0x800, 0x8}, [0x4, 0x0]}}, @subvolid=0xd1}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x9def, 0x10, 0x3, 0x245, 0x0, r1}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000013c0), 0x200000) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6, 0x100010, r5, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r3}) 06:12:54 executing program 3: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name, &(0x7f0000000080)=0x10, 0x800) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0xcb76}]}, 0x1c}, 0x1, 0x0, 0x0, 0x91}, 0x80) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000200)={0xfffffffffffffffc, [], 0x1f, "7ed065e792b474"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001200)) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x2, 0xffff, 0x0, 0x7f, 0x6, 0xa3be, 0x1ff, 0xca7f, 0x7f, 0xfffff220, 0x6, 0x2, 0x80000001, 0x7fff}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000002400)={0x3, [], 0x0, "746c2bc77daf6b"}) 06:12:55 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:12:55 executing program 5: socketpair(0x1e, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xa50}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = accept(r0, 0x0, &(0x7f0000000180)) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r1) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4a}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'caif0\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x80}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x801}, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x71100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r4, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x79b}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000c894}, 0x20000000) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8000) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/module/raid0', 0x4800c1, 0x2) ioctl$SIOCPNDELRESOURCE(r5, 0x89ef, &(0x7f0000000680)=0x1) socket$vsock_stream(0x28, 0x1, 0x0) 06:12:55 executing program 1: r0 = socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x6, 0x1) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_es_remove_extent\x00'}, 0x10) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000000c0)={{r0}, 0x0, 0x10, @unused=[0x8, 0x101, 0x81, 0x1], @devid}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000010c0)={'wg1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000001100)={0x5, 0xfff, 0x40, 0xffffff01, 0x4}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f0000001180)={0x7ff, 0x800, 0x1, @random="27bcc814ca2f", 'nr0\x00'}) syz_genetlink_get_family_id$nl802154(&(0x7f0000003240), r2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000003340)='/sys/bus/nvmem', 0x0, 0x24) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, &(0x7f00000046c0)) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000004740)=0x7, &(0x7f0000004780)=0x2) 06:12:55 executing program 2: socketpair(0x1e, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xa50}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = accept(r0, 0x0, &(0x7f0000000180)) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r1) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4a}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'caif0\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x80}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x801}, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x71100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r4, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x79b}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000c894}, 0x20000000) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8000) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/module/raid0', 0x4800c1, 0x2) ioctl$SIOCPNDELRESOURCE(r5, 0x89ef, &(0x7f0000000680)=0x1) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r6, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:12:55 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/vt', 0x140, 0x0) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x2, 0x1}, 0x2}}, 0x10) r1 = io_uring_setup(0x509a, &(0x7f0000000080)={0x0, 0xb3fa, 0x1, 0x1, 0x18e, 0x0, r0}) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x4010, r1, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0x20010, r0, 0x10000000) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x22500, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000001c0)={{r2}, 0x0, 0x16, @inherit={0x58, &(0x7f0000000140)={0x0, 0x2, 0x5, 0x1, {0x18, 0x4, 0x5, 0x800, 0x8}, [0x4, 0x0]}}, @subvolid=0xd1}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x9def, 0x10, 0x3, 0x245, 0x0, r1}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000013c0), 0x200000) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r3}) 06:12:55 executing program 3: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name, &(0x7f0000000080)=0x10, 0x800) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0xcb76}]}, 0x1c}, 0x1, 0x0, 0x0, 0x91}, 0x80) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000200)={0xfffffffffffffffc, [], 0x1f, "7ed065e792b474"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001200)) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001400)={{0x0, 0x2, 0xffff, 0x0, 0x7f, 0x6, 0xa3be, 0x1ff, 0xca7f, 0x7f, 0xfffff220, 0x6, 0x2, 0x80000001, 0x7fff}}) 06:12:55 executing program 1: r0 = socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x6, 0x1) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_es_remove_extent\x00'}, 0x10) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000000c0)={{r0}, 0x0, 0x10, @unused=[0x8, 0x101, 0x81, 0x1], @devid}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000010c0)={'wg1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000001100)={0x5, 0xfff, 0x40, 0xffffff01, 0x4}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000003240), r2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000003340)='/sys/bus/nvmem', 0x0, 0x24) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, &(0x7f00000046c0)) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000004740)=0x7, &(0x7f0000004780)=0x2) 06:12:55 executing program 2: socketpair(0x1e, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xa50}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = accept(r0, 0x0, &(0x7f0000000180)) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r1) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4a}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'caif0\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x80}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x801}, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x71100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r4, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x79b}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000c894}, 0x20000000) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8000) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/module/raid0', 0x4800c1, 0x2) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r6, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:12:55 executing program 5: socketpair(0x1e, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xa50}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = accept(r0, 0x0, &(0x7f0000000180)) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r1) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4a}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'caif0\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x80}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x801}, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x71100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r4, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x79b}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000c894}, 0x20000000) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8000) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/module/raid0', 0x4800c1, 0x2) socket$vsock_stream(0x28, 0x1, 0x0) 06:12:55 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/vt', 0x140, 0x0) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x2, 0x1}, 0x2}}, 0x10) r1 = io_uring_setup(0x509a, &(0x7f0000000080)={0x0, 0xb3fa, 0x1, 0x1, 0x18e, 0x0, r0}) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x4010, r1, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0x20010, r0, 0x10000000) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x22500, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000001c0)={{r2}, 0x0, 0x16, @inherit={0x58, &(0x7f0000000140)={0x0, 0x2, 0x5, 0x1, {0x18, 0x4, 0x5, 0x800, 0x8}, [0x4, 0x0]}}, @subvolid=0xd1}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x9def, 0x10, 0x3, 0x245, 0x0, r1}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r3}) 06:12:55 executing program 3: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name, &(0x7f0000000080)=0x10, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0xcb76}]}, 0x1c}, 0x1, 0x0, 0x0, 0x91}, 0x80) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000200)={0xfffffffffffffffc, [], 0x1f, "7ed065e792b474"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001200)) 06:12:55 executing program 2: socketpair(0x1e, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xa50}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = accept(r0, 0x0, &(0x7f0000000180)) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r1) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4a}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'caif0\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x80}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x801}, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x71100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r4, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x79b}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000c894}, 0x20000000) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8000) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:12:56 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:12:56 executing program 1: r0 = socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x6, 0x1) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_es_remove_extent\x00'}, 0x10) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000000c0)={{r0}, 0x0, 0x10, @unused=[0x8, 0x101, 0x81, 0x1], @devid}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000010c0)={'wg1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000001100)={0x5, 0xfff, 0x40, 0xffffff01, 0x4}) syz_genetlink_get_family_id$nl802154(&(0x7f0000003240), 0xffffffffffffffff) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000003340)='/sys/bus/nvmem', 0x0, 0x24) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f00000046c0)) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000004740)=0x7, &(0x7f0000004780)=0x2) 06:12:56 executing program 5: socketpair(0x1e, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xa50}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = accept(r0, 0x0, &(0x7f0000000180)) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r1) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4a}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'caif0\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x80}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x801}, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x71100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r4, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x79b}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000c894}, 0x20000000) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8000) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) socket$vsock_stream(0x28, 0x1, 0x0) 06:12:56 executing program 3: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name, &(0x7f0000000080)=0x10, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0xcb76}]}, 0x1c}, 0x1, 0x0, 0x0, 0x91}, 0x80) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000200)={0xfffffffffffffffc, [], 0x1f, "7ed065e792b474"}) 06:12:56 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/vt', 0x140, 0x0) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x2, 0x1}, 0x2}}, 0x10) r1 = io_uring_setup(0x509a, &(0x7f0000000080)={0x0, 0xb3fa, 0x1, 0x1, 0x18e, 0x0, r0}) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x4010, r1, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0x20010, r0, 0x10000000) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x22500, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000001c0)={{r2}, 0x0, 0x16, @inherit={0x58, &(0x7f0000000140)={0x0, 0x2, 0x5, 0x1, {0x18, 0x4, 0x5, 0x800, 0x8}, [0x4, 0x0]}}, @subvolid=0xd1}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x9def, 0x10, 0x3, 0x245, 0x0, r1}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r3}) 06:12:56 executing program 2: socketpair(0x1e, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xa50}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = accept(r0, 0x0, &(0x7f0000000180)) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r1) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4a}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'caif0\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x80}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x801}, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x71100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r4, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x79b}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000c894}, 0x20000000) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8000) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:12:56 executing program 3: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) accept4$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name, &(0x7f0000000080)=0x10, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0xcb76}]}, 0x1c}, 0x1, 0x0, 0x0, 0x91}, 0x80) 06:12:56 executing program 5: socketpair(0x1e, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xa50}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = accept(r0, 0x0, &(0x7f0000000180)) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r1) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4a}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'caif0\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x80}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x801}, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x71100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r4, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x79b}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000c894}, 0x20000000) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8000) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) 06:12:56 executing program 2: socketpair(0x1e, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xa50}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = accept(r0, 0x0, &(0x7f0000000180)) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r1) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4a}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'caif0\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x80}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x801}, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x71100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r4, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x79b}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000c894}, 0x20000000) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8000) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:12:56 executing program 1: r0 = socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x6, 0x1) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_es_remove_extent\x00'}, 0x10) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000000c0)={{r0}, 0x0, 0x10, @unused=[0x8, 0x101, 0x81, 0x1], @devid}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000010c0)={'wg1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000001100)={0x5, 0xfff, 0x40, 0xffffff01, 0x4}) syz_genetlink_get_family_id$nl802154(&(0x7f0000003240), 0xffffffffffffffff) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000003340)='/sys/bus/nvmem', 0x0, 0x24) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f00000046c0)) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000004740)=0x7, &(0x7f0000004780)=0x2) 06:12:56 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/vt', 0x140, 0x0) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x2, 0x1}, 0x2}}, 0x10) r1 = io_uring_setup(0x509a, &(0x7f0000000080)={0x0, 0xb3fa, 0x1, 0x1, 0x18e, 0x0, r0}) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x4010, r1, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0x20010, r0, 0x10000000) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x22500, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000001c0)={{r2}, 0x0, 0x16, @inherit={0x58, &(0x7f0000000140)={0x0, 0x2, 0x5, 0x1, {0x18, 0x4, 0x5, 0x800, 0x8}, [0x4, 0x0]}}, @subvolid=0xd1}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x9def, 0x10, 0x3, 0x245, 0x0, r1}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r3}) 06:12:56 executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) accept4$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name, &(0x7f0000000080)=0x10, 0x800) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0xcb76}]}, 0x1c}, 0x1, 0x0, 0x0, 0x91}, 0x80) 06:12:57 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:12:57 executing program 1: r0 = socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x6, 0x1) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_es_remove_extent\x00'}, 0x10) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000000c0)={{r0}, 0x0, 0x10, @unused=[0x8, 0x101, 0x81, 0x1], @devid}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000010c0)={'wg1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000001100)={0x5, 0xfff, 0x40, 0xffffff01, 0x4}) syz_genetlink_get_family_id$nl802154(&(0x7f0000003240), 0xffffffffffffffff) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000003340)='/sys/bus/nvmem', 0x0, 0x24) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f00000046c0)) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000004740)=0x7, &(0x7f0000004780)=0x2) 06:12:57 executing program 5: socketpair(0x1e, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xa50}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = accept(r0, 0x0, &(0x7f0000000180)) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r1) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4a}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'caif0\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x80}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x801}, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x71100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r4, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x79b}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000c894}, 0x20000000) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8000) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) 06:12:57 executing program 2: socketpair(0x1e, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xa50}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = accept(r0, 0x0, &(0x7f0000000180)) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r1) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4a}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'caif0\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x80}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x801}, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x71100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r4, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x79b}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000c894}, 0x20000000) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8000) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:12:57 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/vt', 0x140, 0x0) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x2, 0x1}, 0x2}}, 0x10) r1 = io_uring_setup(0x509a, &(0x7f0000000080)={0x0, 0xb3fa, 0x1, 0x1, 0x18e, 0x0, r0}) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x4010, r1, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0x20010, r0, 0x10000000) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x22500, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000001c0)={{r2}, 0x0, 0x16, @inherit={0x58, &(0x7f0000000140)={0x0, 0x2, 0x5, 0x1, {0x18, 0x4, 0x5, 0x800, 0x8}, [0x4, 0x0]}}, @subvolid=0xd1}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x9def, 0x10, 0x3, 0x245, 0x0, r1}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r3}) 06:12:57 executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0xcb76}]}, 0x1c}, 0x1, 0x0, 0x0, 0x91}, 0x80) 06:12:57 executing program 3: sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0xcb76}]}, 0x1c}, 0x1, 0x0, 0x0, 0x91}, 0x80) 06:12:57 executing program 2: socketpair(0x1e, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xa50}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = accept(r0, 0x0, &(0x7f0000000180)) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r1) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4a}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'caif0\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x80}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x801}, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x71100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r4, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x79b}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000c894}, 0x20000000) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:12:57 executing program 1: r0 = socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x6, 0x1) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_es_remove_extent\x00'}, 0x10) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000000c0)={{r0}, 0x0, 0x10, @unused=[0x8, 0x101, 0x81, 0x1], @devid}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000010c0)={'wg1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000003240), r2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000003340)='/sys/bus/nvmem', 0x0, 0x24) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, &(0x7f00000046c0)) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000004740)=0x7, &(0x7f0000004780)=0x2) 06:12:57 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/vt', 0x140, 0x0) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x2, 0x1}, 0x2}}, 0x10) r1 = io_uring_setup(0x509a, &(0x7f0000000080)={0x0, 0xb3fa, 0x1, 0x1, 0x18e, 0x0, r0}) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x4010, r1, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0x20010, r0, 0x10000000) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x22500, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000001c0)={{r2}, 0x0, 0x16, @inherit={0x58, &(0x7f0000000140)={0x0, 0x2, 0x5, 0x1, {0x18, 0x4, 0x5, 0x800, 0x8}, [0x4, 0x0]}}, @subvolid=0xd1}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r3}) 06:12:57 executing program 5: socketpair(0x1e, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xa50}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = accept(r0, 0x0, &(0x7f0000000180)) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r1) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4a}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'caif0\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x80}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x801}, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x71100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r4, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x79b}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000c894}, 0x20000000) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8000) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) 06:12:57 executing program 3: sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x80) 06:12:58 executing program 5: socketpair(0x1e, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xa50}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = accept(r0, 0x0, &(0x7f0000000180)) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r1) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4a}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'caif0\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x80}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x801}, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x71100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r4, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x79b}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000c894}, 0x20000000) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) socket$vsock_stream(0x28, 0x1, 0x0) 06:12:58 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:12:58 executing program 1: r0 = socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x6, 0x1) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_es_remove_extent\x00'}, 0x10) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000000c0)={{r0}, 0x0, 0x10, @unused=[0x8, 0x101, 0x81, 0x1], @devid}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000003240), r2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000003340)='/sys/bus/nvmem', 0x0, 0x24) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, &(0x7f00000046c0)) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000004740)=0x7, &(0x7f0000004780)=0x2) 06:12:58 executing program 2: socketpair(0x1e, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xa50}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = accept(r0, 0x0, &(0x7f0000000180)) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r1) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4a}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'caif0\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x80}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x801}, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x71100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r4, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x79b}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000c894}, 0x20000000) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:12:58 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/vt', 0x140, 0x0) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x2, 0x1}, 0x2}}, 0x10) r1 = io_uring_setup(0x509a, &(0x7f0000000080)={0x0, 0xb3fa, 0x1, 0x1, 0x18e, 0x0, r0}) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x4010, r1, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0x20010, r0, 0x10000000) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x22500, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000001c0)={{r2}, 0x0, 0x16, @inherit={0x58, &(0x7f0000000140)={0x0, 0x2, 0x5, 0x1, {0x18, 0x4, 0x5, 0x800, 0x8}, [0x4, 0x0]}}, @subvolid=0xd1}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r3}) 06:12:58 executing program 3: sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) 06:12:58 executing program 5: socketpair(0x1e, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xa50}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = accept(r0, 0x0, &(0x7f0000000180)) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r1) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4a}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'caif0\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x80}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x801}, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x71100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r4, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x79b}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000c894}, 0x20000000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) socket$vsock_stream(0x28, 0x1, 0x0) 06:12:58 executing program 3: socketpair(0x1e, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xa50}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = accept(r0, 0x0, &(0x7f0000000180)) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r1) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4a}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'caif0\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x80}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x801}, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x71100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r4, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x79b}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000c894}, 0x20000000) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) socket$vsock_stream(0x28, 0x1, 0x0) 06:12:58 executing program 1: socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x6, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_es_remove_extent\x00'}, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000003240), r0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000003340)='/sys/bus/nvmem', 0x0, 0x24) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f00000046c0)) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000004740)=0x7, &(0x7f0000004780)=0x2) 06:12:58 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/vt', 0x140, 0x0) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x2, 0x1}, 0x2}}, 0x10) r1 = io_uring_setup(0x509a, &(0x7f0000000080)={0x0, 0xb3fa, 0x1, 0x1, 0x18e, 0x0, r0}) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x4010, r1, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0x20010, r0, 0x10000000) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x22500, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000001c0)={{r2}, 0x0, 0x16, @inherit={0x58, &(0x7f0000000140)={0x0, 0x2, 0x5, 0x1, {0x18, 0x4, 0x5, 0x800, 0x8}, [0x4, 0x0]}}, @subvolid=0xd1}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r3}) 06:12:58 executing program 2: socketpair(0x1e, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xa50}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = accept(r0, 0x0, &(0x7f0000000180)) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r1) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4a}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'caif0\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x80}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x801}, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x71100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r4, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x79b}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000c894}, 0x20000000) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:12:58 executing program 2: socketpair(0x1e, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xa50}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = accept(r0, 0x0, &(0x7f0000000180)) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r1) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4a}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'caif0\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x80}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x801}, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x71100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r4, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x79b}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000c894}, 0x20000000) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:12:58 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/vt', 0x140, 0x0) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x2, 0x1}, 0x2}}, 0x10) r1 = io_uring_setup(0x509a, &(0x7f0000000080)={0x0, 0xb3fa, 0x1, 0x1, 0x18e, 0x0, r0}) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x4010, r1, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0x20010, r0, 0x10000000) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x22500, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000001c0)={{r2}, 0x0, 0x16, @inherit={0x58, &(0x7f0000000140)={0x0, 0x2, 0x5, 0x1, {0x18, 0x4, 0x5, 0x800, 0x8}, [0x4, 0x0]}}, @subvolid=0xd1}) r3 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x9def, 0x10, 0x3, 0x245, 0x0, r1}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd}) 06:12:59 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:12:59 executing program 5: socketpair(0x1e, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xa50}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = accept(r0, 0x0, &(0x7f0000000180)) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r1) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4a}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'caif0\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x80}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x801}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) socket$vsock_stream(0x28, 0x1, 0x0) 06:12:59 executing program 3: socketpair(0x1e, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xa50}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = accept(r0, 0x0, &(0x7f0000000180)) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r1) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4a}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'caif0\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x80}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x801}, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x71100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r4, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x79b}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000c894}, 0x20000000) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) socket$vsock_stream(0x28, 0x1, 0x0) 06:12:59 executing program 1: socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x6, 0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000003240), r0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000003340)='/sys/bus/nvmem', 0x0, 0x24) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f00000046c0)) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000004740)=0x7, &(0x7f0000004780)=0x2) 06:12:59 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/vt', 0x140, 0x0) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x2, 0x1}, 0x2}}, 0x10) r1 = io_uring_setup(0x509a, &(0x7f0000000080)={0x0, 0xb3fa, 0x1, 0x1, 0x18e, 0x0, r0}) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x4010, r1, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0x20010, r0, 0x10000000) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x22500, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000001c0)={{r2}, 0x0, 0x16, @inherit={0x58, &(0x7f0000000140)={0x0, 0x2, 0x5, 0x1, {0x18, 0x4, 0x5, 0x800, 0x8}, [0x4, 0x0]}}, @subvolid=0xd1}) r3 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x9def, 0x10, 0x3, 0x245, 0x0, r1}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd}) 06:12:59 executing program 2: socketpair(0x1e, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xa50}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = accept(r0, 0x0, &(0x7f0000000180)) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r1) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4a}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'caif0\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x80}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x801}, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x71100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r4, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x79b}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000c894}, 0x20000000) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:12:59 executing program 2: socketpair(0x1e, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xa50}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = accept(r0, 0x0, &(0x7f0000000180)) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r1) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4a}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'caif0\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x80}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x801}, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x71100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r4, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x79b}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000c894}, 0x20000000) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:12:59 executing program 5: socketpair(0x1e, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xa50}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = accept(r0, 0x0, &(0x7f0000000180)) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r1) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4a}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'caif0\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x80}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x801}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) socket$vsock_stream(0x28, 0x1, 0x0) 06:12:59 executing program 1: socket$bt_hidp(0x1f, 0x3, 0x6) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000003240), r0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000003340)='/sys/bus/nvmem', 0x0, 0x24) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f00000046c0)) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000004740)=0x7, &(0x7f0000004780)=0x2) 06:12:59 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/vt', 0x140, 0x0) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x2, 0x1}, 0x2}}, 0x10) r1 = io_uring_setup(0x509a, &(0x7f0000000080)={0x0, 0xb3fa, 0x1, 0x1, 0x18e, 0x0, r0}) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x4010, r1, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0x20010, r0, 0x10000000) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x22500, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000001c0)={{r2}, 0x0, 0x16, @inherit={0x58, &(0x7f0000000140)={0x0, 0x2, 0x5, 0x1, {0x18, 0x4, 0x5, 0x800, 0x8}, [0x4, 0x0]}}, @subvolid=0xd1}) r3 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x9def, 0x10, 0x3, 0x245, 0x0, r1}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd}) 06:12:59 executing program 3: socketpair(0x1e, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xa50}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = accept(r0, 0x0, &(0x7f0000000180)) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r1) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4a}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'caif0\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x80}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x801}, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x71100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r4, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x79b}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000c894}, 0x20000000) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) socket$vsock_stream(0x28, 0x1, 0x0) 06:12:59 executing program 2: socketpair(0x1e, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xa50}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = accept(r0, 0x0, &(0x7f0000000180)) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r1) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4a}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'caif0\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x80}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x801}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r4, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:00 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:00 executing program 5: socketpair(0x1e, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xa50}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) accept(r0, 0x0, &(0x7f0000000180)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) socket$vsock_stream(0x28, 0x1, 0x0) 06:13:00 executing program 3: socketpair(0x1e, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xa50}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = accept(r0, 0x0, &(0x7f0000000180)) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r1) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4a}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'caif0\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x80}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x801}, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x71100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r4, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x79b}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000c894}, 0x20000000) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8000) socket$vsock_stream(0x28, 0x1, 0x0) 06:13:00 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000003240), r0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000003340)='/sys/bus/nvmem', 0x0, 0x24) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f00000046c0)) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000004740)=0x7, &(0x7f0000004780)=0x2) 06:13:00 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/vt', 0x140, 0x0) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x2, 0x1}, 0x2}}, 0x10) r1 = io_uring_setup(0x509a, &(0x7f0000000080)={0x0, 0xb3fa, 0x1, 0x1, 0x18e, 0x0, r0}) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x4010, r1, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0x20010, r0, 0x10000000) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x22500, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x9def, 0x10, 0x3, 0x245, 0x0, r1}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r2}) 06:13:00 executing program 2: socketpair(0x1e, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xa50}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = accept(r0, 0x0, &(0x7f0000000180)) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r1) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4a}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'caif0\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x80}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x801}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r4, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:00 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000003340)='/sys/bus/nvmem', 0x0, 0x24) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f00000046c0)) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000004740)=0x7, &(0x7f0000004780)=0x2) 06:13:00 executing program 2: socketpair(0x1e, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xa50}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = accept(r0, 0x0, &(0x7f0000000180)) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r1) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4a}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'caif0\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x80}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x801}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r4, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:00 executing program 5: socketpair(0x1e, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xa50}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) accept(r0, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) socket$vsock_stream(0x28, 0x1, 0x0) 06:13:00 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/vt', 0x140, 0x0) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x2, 0x1}, 0x2}}, 0x10) r1 = io_uring_setup(0x509a, &(0x7f0000000080)={0x0, 0xb3fa, 0x1, 0x1, 0x18e, 0x0, r0}) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x4010, r1, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0x20010, r0, 0x10000000) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x22500, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x9def, 0x10, 0x3, 0x245, 0x0, r1}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r2}) 06:13:00 executing program 3: socketpair(0x1e, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xa50}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = accept(r0, 0x0, &(0x7f0000000180)) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r1) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4a}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'caif0\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x80}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x801}, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x71100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r4, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x79b}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000c894}, 0x20000000) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8000) socket$vsock_stream(0x28, 0x1, 0x0) 06:13:00 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000003340)='/sys/bus/nvmem', 0x0, 0x24) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f00000046c0)) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000004740)=0x7, &(0x7f0000004780)=0x2) 06:13:01 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:01 executing program 2: socketpair(0x1e, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xa50}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) accept(r0, 0x0, &(0x7f0000000180)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r1) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r2, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:01 executing program 5: socketpair(0x1e, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xa50}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) accept(r0, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) socket$vsock_stream(0x28, 0x1, 0x0) 06:13:01 executing program 3: socketpair(0x1e, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xa50}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = accept(r0, 0x0, &(0x7f0000000180)) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r1) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4a}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'caif0\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x80}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x801}, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x71100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r4, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x79b}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000c894}, 0x20000000) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8000) socket$vsock_stream(0x28, 0x1, 0x0) 06:13:01 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/vt', 0x140, 0x0) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x2, 0x1}, 0x2}}, 0x10) r1 = io_uring_setup(0x509a, &(0x7f0000000080)={0x0, 0xb3fa, 0x1, 0x1, 0x18e, 0x0, r0}) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x4010, r1, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0x20010, r0, 0x10000000) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x22500, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x9def, 0x10, 0x3, 0x245, 0x0, r1}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r2}) 06:13:01 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000003340)='/sys/bus/nvmem', 0x0, 0x24) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f00000046c0)) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000004740)=0x7, &(0x7f0000004780)=0x2) 06:13:01 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000003240), 0xffffffffffffffff) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000003340)='/sys/bus/nvmem', 0x0, 0x24) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f00000046c0)) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000004740)=0x7, &(0x7f0000004780)=0x2) 06:13:01 executing program 2: socketpair(0x1e, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xa50}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) accept(r0, 0x0, &(0x7f0000000180)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r2, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:01 executing program 3: socketpair(0x1e, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xa50}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = accept(r0, 0x0, &(0x7f0000000180)) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r1) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4a}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'caif0\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x80}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x801}, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x71100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r4, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x79b}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000c894}, 0x20000000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) socket$vsock_stream(0x28, 0x1, 0x0) 06:13:01 executing program 5: socketpair(0x1e, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xa50}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) accept(r0, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) socket$vsock_stream(0x28, 0x1, 0x0) 06:13:01 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/vt', 0x140, 0x0) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x2, 0x1}, 0x2}}, 0x10) r1 = io_uring_setup(0x509a, &(0x7f0000000080)={0x0, 0xb3fa, 0x1, 0x1, 0x18e, 0x0, r0}) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x4010, r1, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0x20010, r0, 0x10000000) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000001c0)={{}, 0x0, 0x16, @inherit={0x58, &(0x7f0000000140)={0x0, 0x2, 0x5, 0x1, {0x18, 0x4, 0x5, 0x800, 0x8}, [0x4, 0x0]}}, @subvolid=0xd1}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x9def, 0x10, 0x3, 0x245, 0x0, r1}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r2}) 06:13:01 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000003240), 0xffffffffffffffff) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000003340)='/sys/bus/nvmem', 0x0, 0x24) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f00000046c0)) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000004740)=0x7, &(0x7f0000004780)=0x2) 06:13:02 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:02 executing program 2: socketpair(0x1e, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xa50}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) accept(r0, 0x0, &(0x7f0000000180)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r2, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:02 executing program 5: socketpair(0x1e, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xa50}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) socket$vsock_stream(0x28, 0x1, 0x0) 06:13:02 executing program 3: socketpair(0x1e, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xa50}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = accept(r0, 0x0, &(0x7f0000000180)) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r1) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4a}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'caif0\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x80}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x801}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) socket$vsock_stream(0x28, 0x1, 0x0) 06:13:02 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/vt', 0x140, 0x0) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x2, 0x1}, 0x2}}, 0x10) r1 = io_uring_setup(0x509a, &(0x7f0000000080)={0x0, 0xb3fa, 0x1, 0x1, 0x18e, 0x0, r0}) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x4010, r1, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0x20010, r0, 0x10000000) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000001c0)={{}, 0x0, 0x16, @inherit={0x58, &(0x7f0000000140)={0x0, 0x2, 0x5, 0x1, {0x18, 0x4, 0x5, 0x800, 0x8}, [0x4, 0x0]}}, @subvolid=0xd1}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x9def, 0x10, 0x3, 0x245, 0x0, r1}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r2}) 06:13:02 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000003240), 0xffffffffffffffff) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x24) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f00000046c0)) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000004740)=0x7, &(0x7f0000004780)=0x2) 06:13:02 executing program 2: socketpair(0x1e, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xa50}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) accept(r0, 0x0, &(0x7f0000000180)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r2, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:02 executing program 5: socketpair(0x1e, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) socket$vsock_stream(0x28, 0x1, 0x0) 06:13:02 executing program 3: socketpair(0x1e, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xa50}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = accept(r0, 0x0, &(0x7f0000000180)) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r1) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4a}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'caif0\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x80}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x801}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) socket$vsock_stream(0x28, 0x1, 0x0) 06:13:02 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000003240), 0xffffffffffffffff) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x24) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f00000046c0)) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000004740)=0x7, &(0x7f0000004780)=0x2) 06:13:02 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/vt', 0x140, 0x0) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x2, 0x1}, 0x2}}, 0x10) r1 = io_uring_setup(0x509a, &(0x7f0000000080)={0x0, 0xb3fa, 0x1, 0x1, 0x18e, 0x0, r0}) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x4010, r1, 0x10000000) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0x20010, r0, 0x10000000) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000001c0)={{}, 0x0, 0x16, @inherit={0x58, &(0x7f0000000140)={0x0, 0x2, 0x5, 0x1, {0x18, 0x4, 0x5, 0x800, 0x8}, [0x4, 0x0]}}, @subvolid=0xd1}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x9def, 0x10, 0x3, 0x245, 0x0, r1}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r2}) 06:13:02 executing program 5: syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) socket$vsock_stream(0x28, 0x1, 0x0) 06:13:03 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:03 executing program 2: socketpair(0x1e, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xa50}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:03 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000003240), 0xffffffffffffffff) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x24) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f00000046c0)) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000004740)=0x7, &(0x7f0000004780)=0x2) 06:13:03 executing program 3: socketpair(0x1e, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xa50}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) accept(r0, 0x0, &(0x7f0000000180)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) socket$vsock_stream(0x28, 0x1, 0x0) 06:13:03 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/vt', 0x140, 0x0) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x2, 0x1}, 0x2}}, 0x10) r1 = io_uring_setup(0x509a, &(0x7f0000000080)={0x0, 0xb3fa, 0x1, 0x1, 0x18e, 0x0, r0}) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x4010, r1, 0x10000000) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x22500, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000001c0)={{r2}, 0x0, 0x16, @inherit={0x58, &(0x7f0000000140)={0x0, 0x2, 0x5, 0x1, {0x18, 0x4, 0x5, 0x800, 0x8}, [0x4, 0x0]}}, @subvolid=0xd1}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x9def, 0x10, 0x3, 0x245, 0x0, r1}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r3}) 06:13:03 executing program 5: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) socket$vsock_stream(0x28, 0x1, 0x0) 06:13:03 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000003240), 0xffffffffffffffff) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000003340)='/sys/bus/nvmem', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f00000046c0)) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000004740)=0x7, &(0x7f0000004780)=0x2) 06:13:03 executing program 5: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) socket$vsock_stream(0x28, 0x1, 0x0) 06:13:03 executing program 3: socketpair(0x1e, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xa50}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) accept(r0, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) socket$vsock_stream(0x28, 0x1, 0x0) 06:13:03 executing program 2: socketpair(0x1e, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xa50}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:03 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/vt', 0x140, 0x0) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x2, 0x1}, 0x2}}, 0x10) r1 = io_uring_setup(0x509a, &(0x7f0000000080)={0x0, 0xb3fa, 0x1, 0x1, 0x18e, 0x0, r0}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x22500, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000001c0)={{r2}, 0x0, 0x16, @inherit={0x58, &(0x7f0000000140)={0x0, 0x2, 0x5, 0x1, {0x18, 0x4, 0x5, 0x800, 0x8}, [0x4, 0x0]}}, @subvolid=0xd1}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x9def, 0x10, 0x3, 0x245, 0x0, r1}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r3}) 06:13:03 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000003240), 0xffffffffffffffff) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000003340)='/sys/bus/nvmem', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f00000046c0)) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000004740)=0x7, &(0x7f0000004780)=0x2) 06:13:04 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:04 executing program 5: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) socket$vsock_stream(0x28, 0x1, 0x0) 06:13:04 executing program 3: socketpair(0x1e, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xa50}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) accept(r0, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) socket$vsock_stream(0x28, 0x1, 0x0) 06:13:04 executing program 2: socketpair(0x1e, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:04 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/vt', 0x140, 0x0) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x2, 0x1}, 0x2}}, 0x10) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x22500, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000001c0)={{r1}, 0x0, 0x16, @inherit={0x58, &(0x7f0000000140)={0x0, 0x2, 0x5, 0x1, {0x18, 0x4, 0x5, 0x800, 0x8}, [0x4, 0x0]}}, @subvolid=0xd1}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x9def, 0x10, 0x3, 0x245}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r2}) 06:13:04 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000003240), 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, &(0x7f0000003340)='/sys/bus/nvmem', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f00000046c0)) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000004740)=0x7, &(0x7f0000004780)=0x2) 06:13:04 executing program 2: syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:04 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000003240), 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, &(0x7f0000003340)='/sys/bus/nvmem', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f00000046c0)) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000004740)=0x7, &(0x7f0000004780)=0x2) 06:13:04 executing program 3: socketpair(0x1e, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xa50}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) accept(r0, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) socket$vsock_stream(0x28, 0x1, 0x0) 06:13:04 executing program 5: syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000600)) socket$vsock_stream(0x28, 0x1, 0x0) 06:13:04 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/vt', 0x140, 0x0) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x2, 0x1}, 0x2}}, 0x10) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x22500, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000001c0)={{r1}, 0x0, 0x16, @inherit={0x58, &(0x7f0000000140)={0x0, 0x2, 0x5, 0x1, {0x18, 0x4, 0x5, 0x800, 0x8}, [0x4, 0x0]}}, @subvolid=0xd1}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x9def, 0x10, 0x3, 0x245}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r2}) 06:13:04 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000003240), 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, &(0x7f0000003340)='/sys/bus/nvmem', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f00000046c0)) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000004740)=0x7, &(0x7f0000004780)=0x2) 06:13:05 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:05 executing program 3: socketpair(0x1e, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xa50}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) socket$vsock_stream(0x28, 0x1, 0x0) 06:13:05 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/vt', 0x140, 0x0) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x2, 0x1}, 0x2}}, 0x10) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x22500, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000001c0)={{r1}, 0x0, 0x16, @inherit={0x58, &(0x7f0000000140)={0x0, 0x2, 0x5, 0x1, {0x18, 0x4, 0x5, 0x800, 0x8}, [0x4, 0x0]}}, @subvolid=0xd1}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x9def, 0x10, 0x3, 0x245}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r2}) 06:13:05 executing program 5: syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000600)) socket$vsock_stream(0x28, 0x1, 0x0) 06:13:05 executing program 2: syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:05 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000003240), 0xffffffffffffffff) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000003340)='/sys/bus/nvmem', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000004740)=0x7, &(0x7f0000004780)=0x2) 06:13:05 executing program 5: syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000600)) socket$vsock_stream(0x28, 0x1, 0x0) 06:13:05 executing program 3: socketpair(0x1e, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) socket$vsock_stream(0x28, 0x1, 0x0) 06:13:05 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/vt', 0x140, 0x0) r1 = io_uring_setup(0x509a, &(0x7f0000000080)={0x0, 0xb3fa, 0x1, 0x1, 0x18e, 0x0, r0}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x22500, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000001c0)={{r2}, 0x0, 0x16, @inherit={0x58, &(0x7f0000000140)={0x0, 0x2, 0x5, 0x1, {0x18, 0x4, 0x5, 0x800, 0x8}, [0x4, 0x0]}}, @subvolid=0xd1}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x9def, 0x10, 0x3, 0x245, 0x0, r1}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r3}) 06:13:05 executing program 2: syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:05 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000003240), 0xffffffffffffffff) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000003340)='/sys/bus/nvmem', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, &(0x7f0000004780)) 06:13:05 executing program 5: syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 06:13:06 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)={0x0, 0xb3fa, 0x1, 0x1, 0x18e}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x22500, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000001c0)={{r1}, 0x0, 0x16, @inherit={0x58, &(0x7f0000000140)={0x0, 0x2, 0x5, 0x1, {0x18, 0x4, 0x5, 0x800, 0x8}, [0x4, 0x0]}}, @subvolid=0xd1}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x9def, 0x10, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r2}) 06:13:06 executing program 3: syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) socket$vsock_stream(0x28, 0x1, 0x0) 06:13:06 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:06 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000003240), 0xffffffffffffffff) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000003340)='/sys/bus/nvmem', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, &(0x7f0000004780)) 06:13:06 executing program 5: syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 06:13:06 executing program 2: socketpair(0x0, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:06 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000003240), 0xffffffffffffffff) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000003340)='/sys/bus/nvmem', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, &(0x7f0000004780)) 06:13:06 executing program 0: r0 = io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0xb3fa, 0x1, 0x1, 0x18e}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x22500, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000001c0)={{r1}, 0x0, 0x16, @inherit={0x58, &(0x7f0000000140)={0x0, 0x2, 0x5, 0x1, {0x18, 0x4, 0x5, 0x800, 0x8}, [0x4, 0x0]}}, @subvolid=0xd1}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x9def, 0x10, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r2}) 06:13:06 executing program 3: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) socket$vsock_stream(0x28, 0x1, 0x0) 06:13:06 executing program 5: syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 06:13:06 executing program 2: socketpair(0x0, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:06 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000003240), 0xffffffffffffffff) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000003340)='/sys/bus/nvmem', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, 0x0) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) 06:13:06 executing program 3: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) socket$vsock_stream(0x28, 0x1, 0x0) 06:13:07 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:07 executing program 0: r0 = io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0xb3fa, 0x1, 0x1, 0x18e}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x22500, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000001c0)={{r1}, 0x0, 0x16, @inherit={0x58, &(0x7f0000000140)={0x0, 0x2, 0x5, 0x1, {0x18, 0x4, 0x5, 0x800, 0x8}, [0x4, 0x0]}}, @subvolid=0xd1}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x9def, 0x10, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r2}) 06:13:07 executing program 5: syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 06:13:07 executing program 2: socketpair(0x0, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:07 executing program 1: socketpair(0x0, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:07 executing program 3: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) socket$vsock_stream(0x28, 0x1, 0x0) 06:13:07 executing program 5: syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 06:13:07 executing program 3: syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000600)) socket$vsock_stream(0x28, 0x1, 0x0) 06:13:07 executing program 0: r0 = io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0xb3fa, 0x1, 0x1, 0x18e}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x22500, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000001c0)={{r1}, 0x0, 0x16, @inherit={0x58, &(0x7f0000000140)={0x0, 0x2, 0x5, 0x1, {0x18, 0x4, 0x5, 0x800, 0x8}, [0x4, 0x0]}}, @subvolid=0xd1}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x9def, 0x10, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r2}) 06:13:07 executing program 2: socketpair(0x1e, 0x0, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:07 executing program 1: socketpair(0x0, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:07 executing program 5: syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 06:13:08 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:08 executing program 3: syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000600)) socket$vsock_stream(0x28, 0x1, 0x0) 06:13:08 executing program 2: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:08 executing program 0: r0 = io_uring_setup(0x509a, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x22500, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000001c0)={{r1}, 0x0, 0x16, @inherit={0x58, &(0x7f0000000140)={0x0, 0x2, 0x5, 0x1, {0x18, 0x4, 0x5, 0x800, 0x8}, [0x4, 0x0]}}, @subvolid=0xd1}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x9def, 0x10, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r2}) 06:13:08 executing program 1: socketpair(0x0, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:08 executing program 5: syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) 06:13:08 executing program 2: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:08 executing program 5: syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) 06:13:08 executing program 3: syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000600)) socket$vsock_stream(0x28, 0x1, 0x0) 06:13:08 executing program 0: r0 = io_uring_setup(0x509a, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x22500, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000001c0)={{r1}, 0x0, 0x16, @inherit={0x58, &(0x7f0000000140)={0x0, 0x2, 0x5, 0x1, {0x18, 0x4, 0x5, 0x800, 0x8}, [0x4, 0x0]}}, @subvolid=0xd1}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x9def, 0x10, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r2}) 06:13:08 executing program 1: socketpair(0x0, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) 06:13:08 executing program 2: socketpair(0x1e, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:08 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:08 executing program 3: syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 06:13:08 executing program 5: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 06:13:08 executing program 0: r0 = io_uring_setup(0x509a, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x22500, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000001c0)={{r1}, 0x0, 0x16, @inherit={0x58, &(0x7f0000000140)={0x0, 0x2, 0x5, 0x1, {0x18, 0x4, 0x5, 0x800, 0x8}, [0x4, 0x0]}}, @subvolid=0xd1}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x9def, 0x10, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r2}) 06:13:08 executing program 1: socketpair(0x0, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) 06:13:08 executing program 2: socketpair(0x1e, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:08 executing program 5: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 06:13:08 executing program 3: syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 06:13:08 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x1, 0x18e}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x22500, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000001c0)={{r1}, 0x0, 0x16, @inherit={0x58, &(0x7f0000000140)={0x0, 0x2, 0x5, 0x1, {0x18, 0x4, 0x5, 0x800, 0x8}, [0x4, 0x0]}}, @subvolid=0xd1}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x9def, 0x10, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r2}) 06:13:08 executing program 2: socketpair(0x1e, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:09 executing program 1: socketpair(0x0, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) 06:13:09 executing program 5: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 06:13:09 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:09 executing program 3: syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 06:13:09 executing program 2: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0x0, r0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:09 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x18e}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x22500, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000001c0)={{r1}, 0x0, 0x16, @inherit={0x58, &(0x7f0000000140)={0x0, 0x2, 0x5, 0x1, {0x18, 0x4, 0x5, 0x800, 0x8}, [0x4, 0x0]}}, @subvolid=0xd1}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x9def, 0x10, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r2}) 06:13:09 executing program 1: socketpair(0x0, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:09 executing program 5: socketpair(0x0, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) 06:13:09 executing program 2: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0x0, r0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:09 executing program 3: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0x0, r0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:09 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x18e}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x22500, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000001c0)={{r1}, 0x0, 0x16, @inherit={0x58, &(0x7f0000000140)={0x0, 0x2, 0x5, 0x1, {0x18, 0x4, 0x5, 0x800, 0x8}, [0x4, 0x0]}}, @subvolid=0xd1}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x9def, 0x10, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r2}) [ 132.385820][ T3265] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.392457][ T3265] ieee802154 phy1 wpan1: encryption failed: -22 06:13:09 executing program 1: socketpair(0x0, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:09 executing program 5: socketpair(0x0, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) 06:13:09 executing program 2: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0x0, r0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:09 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:09 executing program 3: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0x0, r0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:09 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x22500, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000001c0)={{r1}, 0x0, 0x16, @inherit={0x58, &(0x7f0000000140)={0x0, 0x2, 0x5, 0x1, {0x18, 0x4, 0x5, 0x800, 0x8}, [0x4, 0x0]}}, @subvolid=0xd1}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x9def, 0x10, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r2}) 06:13:09 executing program 1: socketpair(0x0, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:10 executing program 2: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:10 executing program 5: socketpair(0x0, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) 06:13:10 executing program 3: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0x0, r0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:10 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) r1 = openat$mixer(0xffffffffffffff9c, 0x0, 0x22500, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000001c0)={{r1}, 0x0, 0x16, @inherit={0x58, &(0x7f0000000140)={0x0, 0x2, 0x5, 0x1, {0x18, 0x4, 0x5, 0x800, 0x8}, [0x4, 0x0]}}, @subvolid=0xd1}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x9def, 0x10, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r2}) 06:13:10 executing program 2: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:10 executing program 1: socketpair(0x0, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:10 executing program 5: socketpair(0x0, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) 06:13:10 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:10 executing program 3: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0x0, r0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:10 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) r1 = openat$mixer(0xffffffffffffff9c, 0x0, 0x22500, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000001c0)={{r1}, 0x0, 0x16, @inherit={0x58, &(0x7f0000000140)={0x0, 0x2, 0x5, 0x1, {0x18, 0x4, 0x5, 0x800, 0x8}, [0x4, 0x0]}}, @subvolid=0xd1}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x9def, 0x10, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r2}) 06:13:10 executing program 2: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:10 executing program 1: socketpair(0x0, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:10 executing program 5: socketpair(0x0, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) 06:13:10 executing program 3: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0x0, r0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:10 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) r1 = openat$mixer(0xffffffffffffff9c, 0x0, 0x22500, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000001c0)={{r1}, 0x0, 0x16, @inherit={0x58, &(0x7f0000000140)={0x0, 0x2, 0x5, 0x1, {0x18, 0x4, 0x5, 0x800, 0x8}, [0x4, 0x0]}}, @subvolid=0xd1}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x9def, 0x10, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r2}) 06:13:10 executing program 2: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:10 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:10 executing program 5: socketpair(0x0, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) 06:13:10 executing program 1: socketpair(0x0, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:10 executing program 3: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0x0, r0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:10 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000001c0)={{r1}, 0x0, 0x16, @inherit={0x58, &(0x7f0000000140)={0x0, 0x2, 0x5, 0x1, {0x18, 0x4, 0x5, 0x800, 0x8}, [0x4, 0x0]}}, @subvolid=0xd1}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x9def, 0x10, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r2}) 06:13:11 executing program 2: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={0x0, 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:11 executing program 3: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0x0, r0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:11 executing program 1: socketpair(0x0, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:11 executing program 5: socketpair(0x0, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) 06:13:11 executing program 2: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={0x0, 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:11 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000001c0)={{r1}, 0x0, 0x16, @inherit={0x58, &(0x7f0000000140)={0x0, 0x2, 0x5, 0x1, {0x18, 0x4, 0x5, 0x800, 0x8}, [0x4, 0x0]}}, @subvolid=0xd1}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x9def, 0x10, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r2}) 06:13:11 executing program 3: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0x0, r0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:11 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:11 executing program 1: socketpair(0x0, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:11 executing program 5: socketpair(0x0, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) 06:13:11 executing program 2: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={0x0, 0x0, 0x10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:11 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000001c0)={{r1}, 0x0, 0x16, @inherit={0x58, &(0x7f0000000140)={0x0, 0x2, 0x5, 0x1, {0x18, 0x4, 0x5, 0x800, 0x8}, [0x4, 0x0]}}, @subvolid=0xd1}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x9def, 0x10, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r2}) 06:13:11 executing program 3: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0x0, r0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:11 executing program 2: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00'}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:11 executing program 1: socketpair(0x0, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:11 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000001c0)={{r1}, 0x0, 0x16, @inherit={0x58, &(0x7f0000000140)={0x0, 0x2, 0x5, 0x1, {0x18, 0x4, 0x5, 0x800, 0x8}, [0x4, 0x0]}}, @subvolid=0xd1}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x9def, 0x10, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r2}) 06:13:11 executing program 5: socketpair(0x0, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) 06:13:11 executing program 3: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(0x0, r0) syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:11 executing program 2: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00'}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:12 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:12 executing program 1: socketpair(0x0, 0x1, 0x2, &(0x7f0000000000)) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:12 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x9def, 0x10, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r1}) 06:13:12 executing program 5: socketpair(0x0, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) 06:13:12 executing program 2: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00'}, 0x10) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000600)) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:12 executing program 3: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:12 executing program 3: syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:12 executing program 1: socketpair(0x0, 0x1, 0x2, &(0x7f0000000000)) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:12 executing program 5: socketpair(0x0, 0x1, 0x2, &(0x7f0000000000)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) 06:13:12 executing program 2: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00'}, 0x10) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000600)) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:12 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_io_uring_setup(0x0, &(0x7f00000011c0)={0x0, 0x9def, 0x10, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r1}) 06:13:12 executing program 1: socketpair(0x0, 0x1, 0x2, &(0x7f0000000000)) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:13 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:13 executing program 3: syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:13 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_io_uring_setup(0x0, &(0x7f00000011c0)={0x0, 0x9def, 0x10, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r1}) 06:13:13 executing program 2: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00'}, 0x10) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000600)) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:13 executing program 5: socketpair(0x0, 0x1, 0x2, &(0x7f0000000000)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) 06:13:13 executing program 1: socketpair(0x0, 0x0, 0x2, &(0x7f0000000000)) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:13 executing program 5: bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) 06:13:13 executing program 3: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:13 executing program 1: socketpair(0x0, 0x0, 0x2, &(0x7f0000000000)) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:13 executing program 2: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00'}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:13 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_io_uring_setup(0x0, &(0x7f00000011c0)={0x0, 0x9def, 0x10, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r1}) 06:13:13 executing program 3: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:14 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r1, r2+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:14 executing program 5: bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) 06:13:14 executing program 1: socketpair(0x0, 0x0, 0x2, &(0x7f0000000000)) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:14 executing program 2: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00'}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:14 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_io_uring_setup(0x249b, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r1}) 06:13:14 executing program 3: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:14 executing program 3: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) openat$mixer(0xffffffffffffff9c, 0x0, 0x62100, 0x0) 06:13:14 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_io_uring_setup(0x249b, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r1}) 06:13:14 executing program 5: bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x10) 06:13:14 executing program 1: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:14 executing program 2: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00'}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:14 executing program 3: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) openat$mixer(0xffffffffffffff9c, 0x0, 0x62100, 0x0) 06:13:15 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r1, r2+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:15 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_io_uring_setup(0x249b, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r1}) 06:13:15 executing program 1: socketpair(0x0, 0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:15 executing program 5: bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) 06:13:15 executing program 2: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00'}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r0 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:15 executing program 3: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) openat$mixer(0xffffffffffffff9c, 0x0, 0x62100, 0x0) 06:13:15 executing program 2: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00'}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r0 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:15 executing program 5: bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) 06:13:15 executing program 1: socketpair(0x0, 0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:15 executing program 3: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x0, 0x0) 06:13:15 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x10, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r1}) 06:13:15 executing program 5: bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) 06:13:16 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r1, r2+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:16 executing program 2: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00'}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) r0 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:16 executing program 3: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x0, 0x0) 06:13:16 executing program 1: socketpair(0x0, 0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:16 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r1}) 06:13:16 executing program 5: bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={0x0, 0x0, 0x10}, 0x10) 06:13:16 executing program 3: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x0, 0x0) 06:13:16 executing program 2: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00'}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:16 executing program 5: bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={0x0, 0x0, 0x10}, 0x10) 06:13:16 executing program 1: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:16 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r1}) 06:13:16 executing program 3: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r1}) 06:13:17 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r1, r2+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:17 executing program 5: bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={0x0, 0x0, 0x10}, 0x10) 06:13:17 executing program 2: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00'}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:17 executing program 1: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:17 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r1}) 06:13:17 executing program 3: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r1}) 06:13:17 executing program 5: bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00'}, 0x10) 06:13:17 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r1}) 06:13:17 executing program 3: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r1}) 06:13:17 executing program 2: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00'}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:17 executing program 1: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10520}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, r0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:17 executing program 5: bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00'}, 0x10) 06:13:18 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r1, r2+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:18 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r1}) 06:13:18 executing program 2: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00'}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x62100, 0x0) 06:13:18 executing program 3: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:18 executing program 1: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:18 executing program 5: bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00'}, 0x10) 06:13:18 executing program 2: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00'}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x62100, 0x0) 06:13:18 executing program 3: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:18 executing program 5: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:18 executing program 1: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x45) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:18 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r1}) 06:13:18 executing program 2: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00'}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x62100, 0x0) 06:13:19 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r1, r2+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:19 executing program 5: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:19 executing program 3: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) 06:13:19 executing program 1: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x62100, 0x0) 06:13:19 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r1}) 06:13:19 executing program 2: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00'}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x0, 0x0) 06:13:19 executing program 3: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) 06:13:19 executing program 2: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00'}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x0, 0x0) 06:13:19 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r1}) 06:13:19 executing program 5: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:19 executing program 1: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x62100, 0x0) 06:13:19 executing program 3: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:20 executing program 2: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00'}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x0, 0x0) 06:13:20 executing program 5: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:20 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r1}) 06:13:20 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:20 executing program 1: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:13:20 executing program 3: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) 06:13:20 executing program 2: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00'}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x0, 0x0) 06:13:20 executing program 1: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:13:20 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r1}) 06:13:20 executing program 3: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) 06:13:20 executing program 5: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:20 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r1}) 06:13:20 executing program 3: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) 06:13:20 executing program 2: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00'}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80), 0x0, 0x0) 06:13:20 executing program 1: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:13:21 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:21 executing program 5: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:21 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r1}) 06:13:21 executing program 3: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:21 executing program 2: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) 06:13:21 executing program 1: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r1}) 06:13:21 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x0, 0x4, 0x1, 0x314, 0x0, r2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r1}) 06:13:21 executing program 1: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r1}) 06:13:21 executing program 5: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:21 executing program 2: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) 06:13:21 executing program 3: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:21 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x314, 0x0, r2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r1}) 06:13:22 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:22 executing program 1: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r1}) 06:13:22 executing program 5: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:22 executing program 3: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:22 executing program 2: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) 06:13:22 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x314, 0x0, r2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r1}) 06:13:22 executing program 5: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:22 executing program 2: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) 06:13:22 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x314, 0x0, r2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r1}) 06:13:22 executing program 3: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:22 executing program 1: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:22 executing program 5: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:23 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:23 executing program 2: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) 06:13:23 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x0, 0x4, 0x0, 0x314, 0x0, r2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r1}) 06:13:23 executing program 3: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:23 executing program 1: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) 06:13:23 executing program 5: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:23 executing program 2: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) 06:13:23 executing program 3: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:23 executing program 1: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) 06:13:23 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r1}) 06:13:23 executing program 5: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:23 executing program 2: syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) 06:13:24 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:24 executing program 1: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) 06:13:24 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x0, 0x4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r1}) 06:13:24 executing program 3: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:24 executing program 5: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:24 executing program 2: syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) 06:13:24 executing program 2: syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) 06:13:24 executing program 3: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:24 executing program 5: syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:24 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x0, 0x4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r1}) 06:13:24 executing program 1: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:24 executing program 3: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:25 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:25 executing program 2: r0 = io_uring_setup(0x0, &(0x7f0000000080)) syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) 06:13:25 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x0, 0x4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r1}) 06:13:25 executing program 5: syz_io_uring_setup(0x0, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:25 executing program 1: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:25 executing program 3: openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) r0 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:25 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x0, 0x4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r1}) 06:13:25 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:25 executing program 1: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) socket$bt_bnep(0x1f, 0x3, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:25 executing program 2: r0 = io_uring_setup(0x0, &(0x7f0000000080)) syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) 06:13:25 executing program 3: openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) r0 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:25 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x0, 0x4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r1}) 06:13:25 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:25 executing program 2: r0 = io_uring_setup(0x0, &(0x7f0000000080)) syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) 06:13:25 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000001280)) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:25 executing program 3: openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) r0 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:25 executing program 1: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:25 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x0, 0x4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r1}) 06:13:26 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:26 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x0, 0x4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r1}) 06:13:26 executing program 1: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:26 executing program 2: r0 = io_uring_setup(0x509a, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) 06:13:26 executing program 3: r0 = io_uring_setup(0x0, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:26 executing program 3: r0 = io_uring_setup(0x0, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:26 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:26 executing program 2: r0 = io_uring_setup(0x509a, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) 06:13:26 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) 06:13:26 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x0, 0x4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x0, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r1}) 06:13:26 executing program 1: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:26 executing program 3: r0 = io_uring_setup(0x0, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:27 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) 06:13:27 executing program 2: r0 = io_uring_setup(0x509a, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) 06:13:27 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x0, 0x4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x0, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r1}) 06:13:27 executing program 3: r0 = io_uring_setup(0x509a, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:27 executing program 1: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:27 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) 06:13:27 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:27 executing program 3: r0 = io_uring_setup(0x509a, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:27 executing program 2: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) syz_io_uring_setup(0x0, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) 06:13:27 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x0, 0x4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x0, &(0x7f0000001540)={0x0, 0x534c, 0x4, 0x0, 0xbd, 0x0, r1}) 06:13:27 executing program 1: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:27 executing program 5: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:28 executing program 3: r0 = io_uring_setup(0x509a, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:28 executing program 2: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) syz_io_uring_setup(0x0, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) 06:13:28 executing program 1: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:28 executing program 5: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:28 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x0, 0x4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, 0x0) 06:13:28 executing program 3: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:28 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1, 0x0, 0x0, {0x0, r0}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r1, r2+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:28 executing program 1: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:28 executing program 2: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) syz_io_uring_setup(0x0, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) 06:13:28 executing program 5: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:28 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x0, 0x4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, 0x0) 06:13:28 executing program 3: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:29 executing program 2: io_uring_setup(0x509a, &(0x7f0000000080)) syz_io_uring_setup(0x249b, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) 06:13:29 executing program 3: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:29 executing program 5: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) 06:13:29 executing program 1: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:29 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x0, 0x4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, 0x0) 06:13:29 executing program 2: io_uring_setup(0x509a, &(0x7f0000000080)) syz_io_uring_setup(0x249b, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) 06:13:29 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1, 0x0, 0x0, {0x0, r0}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r1, r2+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:29 executing program 3: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) r1 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:29 executing program 5: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) 06:13:29 executing program 1: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:29 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x0, 0x4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x0, 0x4, 0x0, 0xbd, 0x0, r1}) 06:13:29 executing program 2: io_uring_setup(0x509a, &(0x7f0000000080)) syz_io_uring_setup(0x249b, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) 06:13:30 executing program 2: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) 06:13:30 executing program 5: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:30 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x0, 0x4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0xbd, 0x0, r1}) 06:13:30 executing program 1: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:30 executing program 3: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) r1 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:30 executing program 1: io_uring_setup(0x509a, &(0x7f0000000080)) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:30 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1, 0x0, 0x0, {0x0, r0}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r1, r2+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:30 executing program 2: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) 06:13:30 executing program 5: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:30 executing program 3: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) r1 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:30 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x0, 0x4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0xbd, 0x0, r1}) 06:13:30 executing program 1: io_uring_setup(0x509a, &(0x7f0000000080)) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:31 executing program 2: io_uring_setup(0x509a, &(0x7f0000000080)) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) 06:13:31 executing program 3: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:31 executing program 1: io_uring_setup(0x509a, &(0x7f0000000080)) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:31 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x0, 0x4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0xbd, 0x0, r1}) 06:13:31 executing program 5: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:31 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x0, 0x4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, r1}) 06:13:31 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:31 executing program 2: io_uring_setup(0x509a, &(0x7f0000000080)) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000001280)) 06:13:31 executing program 1: openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:31 executing program 3: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:31 executing program 5: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:31 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x0, 0x4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x0, 0x4}) 06:13:32 executing program 5: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:32 executing program 1: openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:32 executing program 2: io_uring_setup(0x509a, &(0x7f0000000080)) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000001280)) 06:13:32 executing program 3: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:32 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x0, 0x4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) io_uring_setup(0x19dd, &(0x7f0000001540)={0x0, 0x0, 0x4}) 06:13:32 executing program 5: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:32 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:32 executing program 1: openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:32 executing program 3: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) r0 = syz_io_uring_setup(0x249b, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:32 executing program 2: io_uring_setup(0x509a, &(0x7f0000000080)) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000001280)) 06:13:32 executing program 5: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:32 executing program 0: openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:33 executing program 3: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) r0 = syz_io_uring_setup(0x249b, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:33 executing program 5: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:33 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:33 executing program 1: io_uring_setup(0x0, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:33 executing program 2: io_uring_setup(0x509a, &(0x7f0000000080)) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), 0x0) 06:13:33 executing program 3: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) r0 = syz_io_uring_setup(0x249b, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:33 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:33 executing program 1: io_uring_setup(0x0, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:33 executing program 2: io_uring_setup(0x509a, &(0x7f0000000080)) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), 0x0) 06:13:33 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:33 executing program 5: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:33 executing program 3: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) r1 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x245, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:34 executing program 2: io_uring_setup(0x509a, &(0x7f0000000080)) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), 0x0) 06:13:34 executing program 3: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) r1 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:34 executing program 5: openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:34 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:34 executing program 1: io_uring_setup(0x0, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:34 executing program 2: io_uring_setup(0x509a, &(0x7f0000000080)) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), 0x0) 06:13:34 executing program 4: mlockall(0x4) mlockall(0x7) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:34 executing program 5: openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:34 executing program 1: io_uring_setup(0x509a, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:34 executing program 0: io_uring_setup(0x509a, &(0x7f0000000080)) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:34 executing program 3: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) r1 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:34 executing program 2: io_uring_setup(0x509a, &(0x7f0000000080)) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), 0x0) 06:13:35 executing program 0: io_uring_setup(0x509a, &(0x7f0000000080)) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:35 executing program 5: openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:35 executing program 1: io_uring_setup(0x509a, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:35 executing program 2: io_uring_setup(0x509a, &(0x7f0000000080)) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), 0x0) 06:13:35 executing program 3: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) r1 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:35 executing program 5: r0 = io_uring_setup(0x0, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:35 executing program 2: syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), 0x0) 06:13:35 executing program 0: io_uring_setup(0x509a, &(0x7f0000000080)) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:35 executing program 3: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) r0 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x245}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:35 executing program 4: mlockall(0x4) mlockall(0x7) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:35 executing program 1: io_uring_setup(0x509a, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:35 executing program 5: r0 = io_uring_setup(0x0, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:36 executing program 5: r0 = io_uring_setup(0x0, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:36 executing program 2: syz_io_uring_setup(0x0, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), 0x0) 06:13:36 executing program 0: ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:36 executing program 3: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) r0 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x245}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:36 executing program 1: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:36 executing program 2: syz_io_uring_setup(0x0, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), 0x0) 06:13:36 executing program 0: ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:36 executing program 3: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) r0 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x245}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:36 executing program 4: mlockall(0x4) mlockall(0x7) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:36 executing program 5: r0 = io_uring_setup(0x509a, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:36 executing program 1: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:36 executing program 2: syz_io_uring_setup(0x0, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), 0x0) 06:13:36 executing program 0: ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:36 executing program 3: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) r0 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x245}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:37 executing program 0: r0 = io_uring_setup(0x0, &(0x7f0000000080)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:37 executing program 2: syz_io_uring_setup(0x249b, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), 0x0) 06:13:37 executing program 1: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:37 executing program 5: r0 = io_uring_setup(0x509a, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:37 executing program 3: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) r0 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x245}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:37 executing program 2: syz_io_uring_setup(0x249b, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), 0x0) 06:13:37 executing program 4: mlockall(0x4) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:37 executing program 0: r0 = io_uring_setup(0x0, &(0x7f0000000080)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:37 executing program 5: r0 = io_uring_setup(0x509a, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:37 executing program 1: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x0, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:37 executing program 3: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) r0 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x245}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:37 executing program 2: syz_io_uring_setup(0x249b, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), 0x0) 06:13:38 executing program 2: syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:38 executing program 5: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:38 executing program 0: r0 = io_uring_setup(0x0, &(0x7f0000000080)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:38 executing program 1: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x0, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:38 executing program 3: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) r0 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x245}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), 0x0) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:38 executing program 0: r0 = io_uring_setup(0x509a, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:38 executing program 4: mlockall(0x4) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:38 executing program 2: syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:38 executing program 5: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:38 executing program 3: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) r0 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x245}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), 0x0) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:38 executing program 1: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x0, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:38 executing program 0: r0 = io_uring_setup(0x509a, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:39 executing program 5: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:39 executing program 3: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) r0 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x245}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), 0x0) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:39 executing program 0: r0 = io_uring_setup(0x509a, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:39 executing program 1: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:39 executing program 2: syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:39 executing program 0: io_uring_setup(0x509a, &(0x7f0000000080)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:39 executing program 4: mlockall(0x4) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:39 executing program 2: syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:39 executing program 5: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:39 executing program 3: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) r0 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x245}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:39 executing program 1: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:39 executing program 0: io_uring_setup(0x509a, &(0x7f0000000080)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:40 executing program 2: syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:40 executing program 1: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:40 executing program 0: io_uring_setup(0x509a, &(0x7f0000000080)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:40 executing program 4: mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:40 executing program 5: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) syz_io_uring_setup(0x0, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:40 executing program 3: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) r0 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x245}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:40 executing program 2: syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:40 executing program 5: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) syz_io_uring_setup(0x0, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:40 executing program 1: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:40 executing program 3: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) r0 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x245}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x0, &(0x7f00000012c0)={0x0, 0x897c, 0x4, 0x1, 0x314, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:40 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) syz_io_uring_setup(0x0, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:40 executing program 2: syz_io_uring_setup(0x0, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:40 executing program 5: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) syz_io_uring_setup(0x0, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:40 executing program 1: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:40 executing program 3: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x245}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:41 executing program 4: mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:41 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) syz_io_uring_setup(0x0, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:41 executing program 2: syz_io_uring_setup(0x0, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:41 executing program 5: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) syz_io_uring_setup(0x249b, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:41 executing program 1: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:41 executing program 3: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x245}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:41 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) syz_io_uring_setup(0x0, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:41 executing program 5: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) syz_io_uring_setup(0x249b, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:41 executing program 2: syz_io_uring_setup(0x0, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:41 executing program 1: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000001380)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:41 executing program 3: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x245}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:41 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) syz_io_uring_setup(0x249b, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:42 executing program 4: mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:42 executing program 5: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) syz_io_uring_setup(0x249b, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:42 executing program 1: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000001380)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:42 executing program 2: syz_io_uring_setup(0x249b, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:42 executing program 3: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) r0 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x245}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x0, 0x4, 0x1, 0x314, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:42 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) syz_io_uring_setup(0x249b, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:42 executing program 1: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000001380)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:42 executing program 5: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000001380)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:42 executing program 2: syz_io_uring_setup(0x249b, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:42 executing program 3: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) r0 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x245}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x0, 0x4, 0x1, 0x314, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:42 executing program 0: r0 = io_uring_setup(0x509a, &(0x7f0000000080)) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) syz_io_uring_setup(0x249b, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:42 executing program 1: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:43 executing program 4: mlockall(0x0) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:43 executing program 3: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) r0 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x245}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x0, 0x4, 0x1, 0x314, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:43 executing program 5: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) r0 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x245}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x0, 0x4, 0x1, 0x314, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:43 executing program 2: syz_io_uring_setup(0x249b, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:43 executing program 0: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) syz_io_uring_setup(0x249b, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:43 executing program 1: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:43 executing program 0: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) syz_io_uring_setup(0x249b, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:43 executing program 1: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:43 executing program 5: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) r0 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x245}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x0, 0x4, 0x1, 0x314, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:43 executing program 3: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) r0 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x245}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x314, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:43 executing program 2: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:43 executing program 0: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) syz_io_uring_setup(0x249b, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:44 executing program 4: mlockall(0x0) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:44 executing program 5: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) r0 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x245}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x0, 0x4, 0x1, 0x314, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:44 executing program 1: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:44 executing program 3: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) r0 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x245}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x314, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:44 executing program 2: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:44 executing program 0: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x249b, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:44 executing program 3: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) r0 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x245}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x314, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:44 executing program 1: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:44 executing program 5: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x245}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) 06:13:44 executing program 0: io_uring_setup(0x509a, &(0x7f0000000080)) syz_io_uring_setup(0x249b, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:44 executing program 2: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:44 executing program 5: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x245}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) 06:13:45 executing program 4: mlockall(0x0) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:45 executing program 0: syz_io_uring_setup(0x249b, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:45 executing program 1: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:45 executing program 2: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) 06:13:45 executing program 3: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) r0 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x245}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x0, 0x4, 0x0, 0x314, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:45 executing program 5: io_uring_setup(0x509a, &(0x7f0000000080)) syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x245}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) 06:13:45 executing program 0: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:45 executing program 3: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) r0 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x245}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x0, 0x4, 0x0, 0x314, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:45 executing program 1: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480), 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:45 executing program 5: syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x245}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) 06:13:45 executing program 2: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), 0x0) 06:13:45 executing program 0: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) 06:13:46 executing program 4: mlockall(0x4) mlockall(0x0) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:46 executing program 5: syz_io_uring_setup(0x0, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x245}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) 06:13:46 executing program 1: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480), 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:46 executing program 2: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), 0x0) 06:13:46 executing program 0: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480), 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:46 executing program 3: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) r0 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x245}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x0, 0x4, 0x0, 0x314, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:46 executing program 5: syz_io_uring_setup(0x0, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x245}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) 06:13:46 executing program 0: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480), 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:46 executing program 2: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:46 executing program 1: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480), 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:46 executing program 3: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) r0 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x245}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x0, 0x4, 0x1, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:46 executing program 5: syz_io_uring_setup(0x0, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x245}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) 06:13:47 executing program 4: mlockall(0x4) mlockall(0x0) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:47 executing program 2: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:47 executing program 0: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480), 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001500), 0x2) 06:13:47 executing program 1: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) 06:13:47 executing program 3: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) r0 = syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x245}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x0, 0x4, 0x1, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:47 executing program 5: syz_io_uring_setup(0x249b, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) 06:13:47 executing program 3: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x245}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x0, 0x4, 0x1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:47 executing program 5: syz_io_uring_setup(0x249b, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) 06:13:47 executing program 0: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480), 0x4) 06:13:47 executing program 1: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) 06:13:47 executing program 2: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:47 executing program 3: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x245}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x0, 0x4, 0x1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:48 executing program 4: mlockall(0x4) mlockall(0x0) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:48 executing program 0: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:48 executing program 2: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), 0x0) 06:13:48 executing program 5: syz_io_uring_setup(0x249b, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) 06:13:48 executing program 1: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) 06:13:48 executing program 3: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x245}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x0, 0x4, 0x1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) 06:13:48 executing program 3: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x245}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x0, 0x4, 0x1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000001380)) 06:13:48 executing program 5: syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) 06:13:48 executing program 2: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), 0x0) 06:13:48 executing program 0: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:48 executing program 1: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), &(0x7f0000001380)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001480)=0x80000001, 0x4) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) 06:13:48 executing program 5: syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000001280)) 06:13:49 executing program 3: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x245}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x0, 0x4, 0x1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000001380)) 06:13:49 executing program 2: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), 0x0) 06:13:49 executing program 0: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 06:13:49 executing program 5: syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000001280)) 06:13:49 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x0) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:49 executing program 1: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:49 executing program 2: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), 0x0) 06:13:49 executing program 0: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:13:49 executing program 5: syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000001280)) 06:13:49 executing program 1: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:49 executing program 3: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x245}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x0, 0x4, 0x1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000001380)) 06:13:49 executing program 5: syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), 0x0) 06:13:49 executing program 2: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), 0x0) 06:13:49 executing program 1: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), 0x0) 06:13:50 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x0) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:50 executing program 0: openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:13:50 executing program 3: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x245}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x0, 0x4, 0x1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), 0x0) 06:13:50 executing program 2: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), 0x0) 06:13:50 executing program 5: syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), 0x0) 06:13:50 executing program 1: syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000001280)) 06:13:50 executing program 5: syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), 0x0) 06:13:50 executing program 0: openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:13:50 executing program 3: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x245}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), &(0x7f0000001280)) syz_io_uring_setup(0x2ba0, &(0x7f00000012c0)={0x0, 0x0, 0x4, 0x1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), 0x0) 06:13:50 executing program 1: syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000001280)) 06:13:50 executing program 2: io_uring_setup(0x509a, &(0x7f0000000080)) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), 0x0) 06:13:50 executing program 0: openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:13:51 executing program 5: syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), 0x0) 06:13:51 executing program 3: syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), 0x0) 06:13:51 executing program 1: syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000001280)) 06:13:51 executing program 2: io_uring_setup(0x0, &(0x7f0000000080)) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), 0x0) 06:13:51 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x0) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:51 executing program 0: io_uring_setup(0x0, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:13:51 executing program 3: syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), 0x0) 06:13:51 executing program 1: syz_io_uring_setup(0x0, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000001280)) 06:13:51 executing program 0: io_uring_setup(0x0, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:13:51 executing program 2: io_uring_setup(0x0, &(0x7f0000000080)) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), 0x0) 06:13:51 executing program 5: syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), 0x0) 06:13:51 executing program 0: io_uring_setup(0x0, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:13:51 executing program 2: io_uring_setup(0x0, &(0x7f0000000080)) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), 0x0) 06:13:51 executing program 5: syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), 0x0) 06:13:51 executing program 3: syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), 0x0) 06:13:51 executing program 1: syz_io_uring_setup(0x0, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000001280)) 06:13:52 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:52 executing program 2: io_uring_setup(0x509a, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), 0x0) 06:13:52 executing program 0: io_uring_setup(0x509a, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:13:52 executing program 5: syz_io_uring_setup(0x0, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), 0x0) 06:13:52 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), 0x0) 06:13:52 executing program 1: syz_io_uring_setup(0x0, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000001280)) 06:13:52 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), 0x0) 06:13:52 executing program 5: syz_io_uring_setup(0x0, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), 0x0) 06:13:52 executing program 0: io_uring_setup(0x509a, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:13:52 executing program 1: syz_io_uring_setup(0x249b, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000001280)) 06:13:52 executing program 2: io_uring_setup(0x509a, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), 0x0) 06:13:52 executing program 3: syz_io_uring_setup(0x0, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), 0x0) 06:13:53 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:53 executing program 5: syz_io_uring_setup(0x0, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), 0x0) 06:13:53 executing program 0: io_uring_setup(0x509a, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 06:13:53 executing program 1: syz_io_uring_setup(0x249b, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000001280)) 06:13:53 executing program 3: syz_io_uring_setup(0x249b, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), 0x0) 06:13:53 executing program 2: io_uring_setup(0x509a, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), 0x0) 06:13:53 executing program 5: syz_io_uring_setup(0x249b, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), 0x0) 06:13:53 executing program 1: syz_io_uring_setup(0x249b, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, &(0x7f0000001280)) 06:13:53 executing program 3: syz_io_uring_setup(0x249b, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), 0x0) 06:13:53 executing program 2: io_uring_setup(0x509a, &(0x7f0000000080)) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x0, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), 0x0) 06:13:53 executing program 0: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:13:53 executing program 3: syz_io_uring_setup(0x249b, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), 0x0) 06:13:54 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:54 executing program 5: syz_io_uring_setup(0x249b, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), 0x0) 06:13:54 executing program 0: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:13:54 executing program 1: syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:54 executing program 2: io_uring_setup(0x509a, &(0x7f0000000080)) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x0, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), 0x0) 06:13:54 executing program 3: syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:54 executing program 2: io_uring_setup(0x509a, &(0x7f0000000080)) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x0, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), 0x0) 06:13:54 executing program 5: syz_io_uring_setup(0x249b, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001240), 0x0) 06:13:54 executing program 1: syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:54 executing program 0: io_uring_setup(0x509a, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:13:54 executing program 3: syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:54 executing program 5: syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:55 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:55 executing program 0: syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:55 executing program 2: io_uring_setup(0x509a, &(0x7f0000000080)) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), 0x0) 06:13:55 executing program 3: syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:55 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:55 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:55 executing program 0: syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:55 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:55 executing program 2: io_uring_setup(0x509a, &(0x7f0000000080)) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), 0x0) 06:13:55 executing program 0: syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:55 executing program 2: io_uring_setup(0x509a, &(0x7f0000000080)) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:55 executing program 2: io_uring_setup(0x509a, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), 0x0) 06:13:56 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:56 executing program 0: syz_io_uring_setup(0x0, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:56 executing program 2: io_uring_setup(0x509a, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x249b, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x2ba0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000001340), 0x0) 06:13:56 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:56 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:56 executing program 0: syz_io_uring_setup(0x0, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:56 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:56 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:56 executing program 0: syz_io_uring_setup(0x0, &(0x7f00000011c0), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:56 executing program 0: syz_io_uring_setup(0x249b, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:56 executing program 0: syz_io_uring_setup(0x249b, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:56 executing program 0: syz_io_uring_setup(0x249b, 0x0, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) 06:13:57 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:57 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:57 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x0) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:57 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:57 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:57 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:58 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:13:58 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x0) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:58 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:13:58 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x0, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:58 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:58 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:13:59 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:13:59 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x0) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:59 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) 06:13:59 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x0, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:13:59 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:13:59 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) 06:14:00 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:14:00 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x0) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:14:00 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x0, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:00 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) 06:14:00 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) 06:14:00 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) 06:14:01 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:01 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x0) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) 06:14:01 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, 0x0) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:01 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) 06:14:01 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) 06:14:01 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) 06:14:02 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:02 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x0) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) 06:14:02 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, 0x0) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:02 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) 06:14:02 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) 06:14:02 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) 06:14:03 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:03 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x0) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) 06:14:03 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, 0x0) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:03 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) 06:14:03 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) 06:14:03 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) 06:14:03 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:04 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x0) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) 06:14:04 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x0) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:04 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)) 06:14:04 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) 06:14:04 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) 06:14:04 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) 06:14:04 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:05 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x0) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) 06:14:05 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) 06:14:05 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x0) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:05 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 06:14:05 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) 06:14:05 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) 06:14:05 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() 06:14:06 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:06 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x0) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)) 06:14:06 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) 06:14:06 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x0) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:06 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x0) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) 06:14:06 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)) 06:14:06 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) 06:14:06 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x0) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) 06:14:06 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)) 06:14:07 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) 06:14:07 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 06:14:07 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:07 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x0) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 06:14:07 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r1, r2+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:07 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) 06:14:07 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) 06:14:07 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 06:14:07 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x0) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() 06:14:07 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) 06:14:07 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 06:14:08 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x0) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) 06:14:08 executing program 1: mlockall(0x4) mlockall(0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 06:14:08 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:08 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 06:14:08 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() 06:14:08 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r1, r2+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:08 executing program 1: mlockall(0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 06:14:08 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x0) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) 06:14:08 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 06:14:08 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() 06:14:08 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:08 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() 06:14:08 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() 06:14:09 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r1, r2+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:09 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x0) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) 06:14:09 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:09 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) 06:14:09 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() 06:14:09 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() 06:14:09 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x0) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) 06:14:09 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) 06:14:09 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:09 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) 06:14:10 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() 06:14:10 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x0) prctl$PR_GET_SECCOMP(0x15) 06:14:10 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:10 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) 06:14:10 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) clock_gettime(0x0, &(0x7f00000001c0)) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:10 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) 06:14:10 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 06:14:10 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) 06:14:10 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x0) 06:14:10 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) clock_gettime(0x0, &(0x7f00000001c0)) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:10 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) [ 193.833648][ T3265] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.839968][ T3265] ieee802154 phy1 wpan1: encryption failed: -22 06:14:11 executing program 0: mlockall(0x4) mlockall(0x7) 06:14:11 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) 06:14:11 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) 06:14:11 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:11 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:11 executing program 0: mlockall(0x7) 06:14:11 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) 06:14:11 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) 06:14:11 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) 06:14:11 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:11 executing program 0: mlockall(0x0) 06:14:11 executing program 3: mlockall(0x4) mlockall(0x7) 06:14:12 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) 06:14:12 executing program 0: mlockall(0x0) 06:14:12 executing program 2: mlockall(0x4) mlockall(0x7) 06:14:12 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:12 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() clock_gettime(0x0, &(0x7f00000001c0)) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:12 executing program 0: mlockall(0x0) 06:14:12 executing program 3: mlockall(0x4) mlockall(0x7) 06:14:12 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:12 executing program 2: mlockall(0x4) mlockall(0x7) 06:14:12 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) mlockall(0x4) 06:14:12 executing program 3: mlockall(0x7) 06:14:12 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() clock_gettime(0x0, &(0x7f00000001c0)) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:13 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:13 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) mlockall(0x4) 06:14:13 executing program 2: mlockall(0x4) mlockall(0x7) 06:14:13 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:13 executing program 3: mlockall(0x0) 06:14:13 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() clock_gettime(0x0, &(0x7f00000001c0)) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:13 executing program 2: mlockall(0x7) 06:14:13 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) mlockall(0x4) 06:14:13 executing program 3: mlockall(0x0) 06:14:13 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:13 executing program 3: mlockall(0x0) 06:14:14 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:14 executing program 2: mlockall(0x7) 06:14:14 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) mlockall(0x4) 06:14:14 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) mlockall(0x4) 06:14:14 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:14 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) 06:14:14 executing program 2: mlockall(0x0) 06:14:14 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:14 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) mlockall(0x4) 06:14:14 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) mlockall(0x4) 06:14:14 executing program 2: mlockall(0x0) 06:14:14 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) mlockall(0x4) 06:14:15 executing program 2: mlockall(0x0) 06:14:15 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) 06:14:15 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:15 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:15 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) mlockall(0x4) 06:14:15 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() clock_gettime(0x0, &(0x7f00000001c0)) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:15 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) mlockall(0x4) 06:14:15 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:15 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 06:14:15 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) 06:14:15 executing program 1: mlockall(0x4) mlockall(0x7) prctl$PR_GET_SECCOMP(0x15) mlockall(0x4) 06:14:15 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() clock_gettime(0x0, &(0x7f00000001c0)) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:16 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:16 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() 06:14:16 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:16 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) 06:14:16 executing program 1: mlockall(0x4) mlockall(0x7) prctl$PR_GET_SECCOMP(0x15) mlockall(0x4) 06:14:16 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() clock_gettime(0x0, &(0x7f00000001c0)) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:16 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:16 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) 06:14:16 executing program 3: mlockall(0x4) mlockall(0x7) 06:14:16 executing program 1: mlockall(0x4) mlockall(0x7) prctl$PR_GET_SECCOMP(0x15) mlockall(0x4) 06:14:17 executing program 5: mlockall(0x4) mlockall(0x7) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:17 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) 06:14:17 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() clock_gettime(0x0, &(0x7f00000001c0)) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) 06:14:17 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:17 executing program 3: mlockall(0x7) 06:14:17 executing program 1: mlockall(0x7) prctl$PR_GET_SECCOMP(0x15) mlockall(0x4) 06:14:17 executing program 5: mlockall(0x4) mlockall(0x7) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:17 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 06:14:17 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() clock_gettime(0x0, &(0x7f00000001c0)) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) 06:14:17 executing program 3: mlockall(0x0) 06:14:17 executing program 1: mlockall(0x0) prctl$PR_GET_SECCOMP(0x15) mlockall(0x4) 06:14:18 executing program 3: mlockall(0x0) 06:14:18 executing program 5: mlockall(0x7) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:18 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) 06:14:18 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() clock_gettime(0x0, &(0x7f00000001c0)) 06:14:18 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:18 executing program 1: mlockall(0x0) prctl$PR_GET_SECCOMP(0x15) mlockall(0x4) 06:14:18 executing program 3: mlockall(0x0) 06:14:18 executing program 1: mlockall(0x0) prctl$PR_GET_SECCOMP(0x15) mlockall(0x4) 06:14:18 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) 06:14:18 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() clock_gettime(0x0, &(0x7f00000001c0)) 06:14:18 executing program 5: mlockall(0x7) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:18 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 06:14:18 executing program 1: mlockall(0x7) prctl$PR_GET_SECCOMP(0x15) mlockall(0x0) 06:14:19 executing program 0: mlockall(0x4) mlockall(0x7) 06:14:19 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() clock_gettime(0x0, &(0x7f00000001c0)) 06:14:19 executing program 5: mlockall(0x7) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:19 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0), 0x0, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:19 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 06:14:19 executing program 1: mlockall(0x7) prctl$PR_GET_SECCOMP(0x15) mlockall(0x0) 06:14:19 executing program 0: mlockall(0x7) 06:14:19 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() 06:14:19 executing program 5: mlockall(0x0) mlockall(0x7) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:19 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() clock_gettime(0x0, &(0x7f00000001c0)) 06:14:19 executing program 1: mlockall(0x7) prctl$PR_GET_SECCOMP(0x15) mlockall(0x0) 06:14:19 executing program 0: mlockall(0x0) 06:14:19 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() 06:14:20 executing program 5: mlockall(0x0) mlockall(0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:20 executing program 0: mlockall(0x0) 06:14:20 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0), 0x0, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:20 executing program 5: mlockall(0x0) mlockall(0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:20 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) 06:14:20 executing program 1: mlockall(0x0) mlockall(0x7) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:20 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() clock_gettime(0x0, &(0x7f00000001c0)) 06:14:20 executing program 0: mlockall(0x0) 06:14:20 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:20 executing program 5: mlockall(0x0) mlockall(0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:20 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() clock_gettime(0x0, &(0x7f00000001c0)) 06:14:20 executing program 5: mlockall(0x0) mlockall(0x7) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) clock_gettime(0x0, 0x0) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:20 executing program 1: mlockall(0x0) mlockall(0x7) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:21 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) 06:14:21 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0), 0x0, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:21 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:21 executing program 5: mlockall(0x0) mlockall(0x7) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) clock_gettime(0x0, 0x0) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:21 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) 06:14:21 executing program 1: mlockall(0x0) mlockall(0x7) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) clock_gettime(0x0, 0x0) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:21 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() 06:14:21 executing program 5: mlockall(0x0) mlockall(0x7) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) clock_gettime(0x0, 0x0) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:21 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) 06:14:21 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) 06:14:21 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() 06:14:22 executing program 5: mlockall(0x0) mlockall(0x7) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, 0x0, 0x5) 06:14:22 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:22 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0), 0x0, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:22 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) clock_gettime(0x5, &(0x7f0000000080)) 06:14:22 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) 06:14:22 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() 06:14:22 executing program 5: mlockall(0x0) mlockall(0x7) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 06:14:22 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) clock_gettime(0x5, &(0x7f0000000080)) 06:14:22 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 06:14:22 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() 06:14:23 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) clock_gettime(0x5, &(0x7f0000000080)) 06:14:23 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) clock_gettime(0x5, &(0x7f0000000080)) 06:14:23 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:23 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) 06:14:23 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 06:14:23 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) 06:14:23 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) 06:14:23 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) clock_gettime(0x5, &(0x7f0000000080)) 06:14:23 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) 06:14:23 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) 06:14:23 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) 06:14:24 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) clock_gettime(0x5, &(0x7f0000000080)) 06:14:24 executing program 2: mlockall(0x4) mlockall(0x7) clock_gettime(0x5, &(0x7f0000000080)) 06:14:24 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:24 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) 06:14:24 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) clock_gettime(0x5, &(0x7f0000000080)) 06:14:24 executing program 0: mlockall(0x4) mlockall(0x7) 06:14:24 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) clock_gettime(0x5, &(0x7f0000000080)) 06:14:24 executing program 2: mlockall(0x4) clock_gettime(0x5, &(0x7f0000000080)) 06:14:24 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) 06:14:24 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) clock_gettime(0x5, &(0x7f0000000080)) 06:14:25 executing program 2: mlockall(0x4) clock_gettime(0x5, &(0x7f0000000080)) 06:14:25 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) clock_gettime(0x5, &(0x7f0000000080)) 06:14:25 executing program 0: mlockall(0x4) mlockall(0x7) clock_gettime(0x5, &(0x7f0000000080)) 06:14:25 executing program 3: mlockall(0x4) mlockall(0x7) 06:14:25 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r1, r2+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:25 executing program 2: mlockall(0x4) clock_gettime(0x5, &(0x7f0000000080)) 06:14:25 executing program 1: mlockall(0x4) mlockall(0x7) clock_gettime(0x5, &(0x7f0000000080)) 06:14:25 executing program 2: mlockall(0x7) clock_gettime(0x5, &(0x7f0000000080)) 06:14:25 executing program 0: mlockall(0x7) 06:14:25 executing program 3: mlockall(0x7) 06:14:25 executing program 5: mlockall(0x4) mlockall(0x7) clock_gettime(0x5, &(0x7f0000000080)) 06:14:25 executing program 1: mlockall(0x4) mlockall(0x7) clock_gettime(0x5, &(0x7f0000000080)) 06:14:25 executing program 2: mlockall(0x7) clock_gettime(0x5, &(0x7f0000000080)) 06:14:26 executing program 5: mlockall(0x4) clock_gettime(0x5, &(0x7f0000000080)) 06:14:26 executing program 0: mlockall(0x7) 06:14:26 executing program 3: mlockall(0x0) 06:14:26 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r1, r2+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:26 executing program 5: mlockall(0x4) clock_gettime(0x5, &(0x7f0000000080)) 06:14:26 executing program 1: mlockall(0x4) mlockall(0x7) clock_gettime(0x5, &(0x7f0000000080)) 06:14:26 executing program 2: mlockall(0x7) clock_gettime(0x5, &(0x7f0000000080)) 06:14:26 executing program 3: mlockall(0x0) 06:14:26 executing program 5: mlockall(0x4) clock_gettime(0x5, &(0x7f0000000080)) 06:14:26 executing program 0: mlockall(0x7) 06:14:26 executing program 3: mlockall(0x0) 06:14:26 executing program 5: mlockall(0x7) clock_gettime(0x5, &(0x7f0000000080)) 06:14:26 executing program 3: mlockall(0x7) clock_gettime(0x5, &(0x7f0000000080)) 06:14:26 executing program 2: mlockall(0x0) clock_gettime(0x5, &(0x7f0000000080)) 06:14:26 executing program 1: mlockall(0x4) clock_gettime(0x5, &(0x7f0000000080)) 06:14:27 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r1, r2+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:27 executing program 2: mlockall(0x0) clock_gettime(0x5, &(0x7f0000000080)) 06:14:27 executing program 1: mlockall(0x4) clock_gettime(0x5, &(0x7f0000000080)) 06:14:27 executing program 0: mlockall(0x0) 06:14:27 executing program 5: mlockall(0x0) clock_gettime(0x5, &(0x7f0000000080)) 06:14:27 executing program 3: mlockall(0x7) clock_gettime(0x5, &(0x7f0000000080)) 06:14:27 executing program 0: mlockall(0x0) 06:14:27 executing program 2: mlockall(0x0) clock_gettime(0x5, &(0x7f0000000080)) 06:14:27 executing program 5: mlockall(0x0) clock_gettime(0x5, &(0x7f0000000080)) 06:14:27 executing program 1: mlockall(0x4) clock_gettime(0x5, &(0x7f0000000080)) 06:14:27 executing program 0: mlockall(0x0) 06:14:27 executing program 5: mlockall(0x0) clock_gettime(0x5, &(0x7f0000000080)) 06:14:28 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:28 executing program 1: mlockall(0x7) clock_gettime(0x5, &(0x7f0000000080)) 06:14:28 executing program 2: mlockall(0x7) clock_gettime(0x0, &(0x7f0000000080)) 06:14:28 executing program 3: mlockall(0x7) clock_gettime(0x5, &(0x7f0000000080)) 06:14:28 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r1, r2+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:28 executing program 5: mlockall(0x7) clock_gettime(0x0, &(0x7f0000000080)) 06:14:28 executing program 5: mlockall(0x7) clock_gettime(0x0, &(0x7f0000000080)) 06:14:28 executing program 1: mlockall(0x0) clock_gettime(0x5, &(0x7f0000000080)) 06:14:28 executing program 3: mlockall(0x7) 06:14:28 executing program 2: mlockall(0x7) clock_gettime(0x0, &(0x7f0000000080)) 06:14:29 executing program 1: mlockall(0x0) clock_gettime(0x5, &(0x7f0000000080)) 06:14:29 executing program 5: mlockall(0x7) clock_gettime(0x0, &(0x7f0000000080)) 06:14:29 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:29 executing program 1: mlockall(0x0) clock_gettime(0x5, &(0x7f0000000080)) 06:14:29 executing program 3: mlockall(0x0) 06:14:29 executing program 2: mlockall(0x7) clock_gettime(0x0, &(0x7f0000000080)) 06:14:29 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r1, r2+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:29 executing program 3: mlockall(0x0) 06:14:29 executing program 1: mlockall(0x7) clock_gettime(0x0, &(0x7f0000000080)) 06:14:29 executing program 5: mlockall(0x7) clock_gettime(0x5, 0x0) 06:14:29 executing program 3: mlockall(0x0) 06:14:29 executing program 2: mlockall(0x7) clock_gettime(0x5, 0x0) 06:14:30 executing program 1: mlockall(0x7) clock_gettime(0x0, &(0x7f0000000080)) 06:14:30 executing program 3: mlockall(0x7) clock_gettime(0x0, &(0x7f0000000080)) 06:14:30 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:30 executing program 5: mlockall(0x7) clock_gettime(0x5, 0x0) 06:14:30 executing program 2: mlockall(0x7) clock_gettime(0x5, 0x0) 06:14:30 executing program 1: mlockall(0x7) clock_gettime(0x0, &(0x7f0000000080)) 06:14:30 executing program 3: mlockall(0x7) clock_gettime(0x0, &(0x7f0000000080)) 06:14:30 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r1, r2+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:30 executing program 1: mlockall(0x7) clock_gettime(0x5, 0x0) 06:14:30 executing program 5: mlockall(0x7) clock_gettime(0x5, 0x0) 06:14:30 executing program 2: mlockall(0x7) clock_gettime(0x5, 0x0) 06:14:31 executing program 3: mlockall(0x7) clock_gettime(0x0, &(0x7f0000000080)) 06:14:31 executing program 2: mlockall(0x7) clock_gettime(0x5, 0x0) 06:14:31 executing program 1: mlockall(0x7) clock_gettime(0x5, 0x0) 06:14:31 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:31 executing program 5: mlockall(0x7) clock_gettime(0x0, &(0x7f0000000080)) 06:14:31 executing program 3: mlockall(0x7) clock_gettime(0x0, &(0x7f0000000080)) 06:14:31 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:31 executing program 0: mlockall(0x7) clock_gettime(0x5, &(0x7f0000000080)) 06:14:31 executing program 1: mlockall(0x7) clock_gettime(0x5, 0x0) 06:14:32 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r1, r2+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:32 executing program 5: mlockall(0x7) clock_gettime(0x5, &(0x7f0000000080)) 06:14:32 executing program 3: mlockall(0x7) clock_gettime(0x0, &(0x7f0000000080)) 06:14:32 executing program 1: mlockall(0x7) clock_gettime(0x5, 0x0) 06:14:32 executing program 0: mlockall(0x7) clock_gettime(0x5, &(0x7f0000000080)) 06:14:32 executing program 3: clock_gettime(0x0, &(0x7f0000000080)) 06:14:32 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:32 executing program 1: mlockall(0x4) mlockall(0x7) clock_gettime(0x5, &(0x7f0000000080)) 06:14:32 executing program 5: mlockall(0x4) mlockall(0x7) clock_gettime(0x5, &(0x7f0000000080)) 06:14:32 executing program 3: clock_gettime(0x0, &(0x7f0000000080)) 06:14:32 executing program 0: mlockall(0x4) mlockall(0x7) clock_gettime(0x5, &(0x7f0000000080)) 06:14:33 executing program 3: clock_gettime(0x0, &(0x7f0000000080)) 06:14:33 executing program 2: clock_gettime(0x0, &(0x7f0000000080)) 06:14:33 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:33 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:33 executing program 5: mlockall(0x4) mlockall(0x7) 06:14:33 executing program 3: mlockall(0x0) clock_gettime(0x0, &(0x7f0000000080)) 06:14:33 executing program 2: clock_gettime(0x0, &(0x7f0000000080)) 06:14:33 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) 06:14:33 executing program 2: clock_gettime(0x0, &(0x7f0000000080)) 06:14:33 executing program 3: mlockall(0x0) clock_gettime(0x0, &(0x7f0000000080)) 06:14:33 executing program 2: clock_gettime(0x0, 0x0) 06:14:33 executing program 5: mlockall(0x4) mlockall(0x7) 06:14:33 executing program 3: mlockall(0x0) clock_gettime(0x0, &(0x7f0000000080)) 06:14:33 executing program 2: clock_gettime(0x0, 0x0) 06:14:34 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:34 executing program 1: mlockall(0x4) mlockall(0x7) prctl$PR_GET_SECCOMP(0x15) mlockall(0x4) 06:14:34 executing program 0: mlockall(0x4) mlockall(0x7) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:34 executing program 3: mlockall(0x7) clock_gettime(0x0, 0x0) 06:14:34 executing program 2: clock_gettime(0x0, 0x0) 06:14:34 executing program 5: clock_gettime(0x0, 0x0) 06:14:34 executing program 5: clock_gettime(0x0, 0x0) 06:14:34 executing program 2: mlockall(0x4) mlockall(0x7) 06:14:34 executing program 5: clock_gettime(0x0, 0x0) 06:14:34 executing program 3: mlockall(0x7) clock_gettime(0x0, 0x0) 06:14:34 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) 06:14:34 executing program 5: mlockall(0x4) mlockall(0x7) prctl$PR_GET_SECCOMP(0x15) mlockall(0x4) 06:14:35 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:35 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:35 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:35 executing program 3: mlockall(0x7) clock_gettime(0x0, 0x0) 06:14:35 executing program 0: mlockall(0x4) mlockall(0x7) prctl$PR_GET_SECCOMP(0x15) mlockall(0x4) 06:14:35 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) 06:14:35 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:35 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) 06:14:35 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:35 executing program 0: mlockall(0x4) mlockall(0x7) 06:14:35 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() clock_gettime(0x0, &(0x7f00000001c0)) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:36 executing program 3: mlockall(0x7) 06:14:36 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:36 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) 06:14:36 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:36 executing program 0: mlockall(0x4) mlockall(0x7) 06:14:36 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) 06:14:36 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) clock_gettime(0x0, &(0x7f00000001c0)) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:36 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) clock_gettime(0x0, &(0x7f00000001c0)) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:36 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) 06:14:36 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) 06:14:37 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:37 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:37 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x0) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) 06:14:37 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:37 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) 06:14:37 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) 06:14:37 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:37 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) 06:14:37 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) 06:14:37 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 06:14:38 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() 06:14:38 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:38 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x0) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) 06:14:38 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) 06:14:38 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) 06:14:38 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:38 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() 06:14:38 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x0) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) 06:14:38 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 06:14:38 executing program 2: mlockall(0x4) mlockall(0x2) 06:14:38 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r1, r2+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:39 executing program 0: mlockall(0x4) mlockall(0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 06:14:39 executing program 2: mlockall(0x2) 06:14:39 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 06:14:39 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) 06:14:39 executing program 2: mlockall(0x0) 06:14:39 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:39 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:39 executing program 2: mlockall(0x0) 06:14:39 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x0) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() 06:14:39 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) 06:14:39 executing program 2: mlockall(0x0) 06:14:40 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 06:14:40 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:40 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)) 06:14:40 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) 06:14:40 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) 06:14:40 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x0) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) 06:14:40 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x0) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) 06:14:40 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x0, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:41 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x0) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:41 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 06:14:41 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:41 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) 06:14:41 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) 06:14:41 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) 06:14:41 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x0, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:42 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x0) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:42 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:42 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) 06:14:42 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x0, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:42 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) 06:14:42 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x0, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:43 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x0, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:43 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) 06:14:43 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x0) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:43 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) 06:14:43 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) [ 226.620522][ T9611] Bluetooth: hci2: command 0x0406 tx timeout [ 226.620589][ T9671] Bluetooth: hci1: command 0x0406 tx timeout [ 226.628518][ T9611] Bluetooth: hci5: command 0x0406 tx timeout [ 226.644288][ T9671] Bluetooth: hci3: command 0x0406 tx timeout [ 226.650847][ T9671] Bluetooth: hci4: command 0x0406 tx timeout [ 226.657144][ T9671] Bluetooth: hci0: command 0x0406 tx timeout 06:14:43 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) 06:14:44 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x0, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:44 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:44 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:44 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)) 06:14:44 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) 06:14:44 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x0) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:44 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) 06:14:44 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) 06:14:45 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x0, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:45 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:45 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:45 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x0, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:45 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) 06:14:45 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r0, r1+60000000}, &(0x7f0000000240)) 06:14:46 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x0, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:46 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:46 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:46 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) 06:14:46 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) 06:14:46 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r0, r1+60000000}, &(0x7f0000000240)) 06:14:46 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x0, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:47 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r0, r1+60000000}, &(0x7f0000000240)) 06:14:47 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r0, r1+60000000}, &(0x7f0000000240)) 06:14:47 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) 06:14:47 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) 06:14:47 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) 06:14:47 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x0, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:48 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r0, r1+60000000}, &(0x7f0000000240)) 06:14:48 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x0, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:48 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) 06:14:48 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x0, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:48 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) 06:14:48 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x0, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:49 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r0, r1+60000000}, &(0x7f0000000240)) 06:14:49 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) 06:14:49 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) 06:14:49 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) 06:14:49 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) 06:14:49 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0x0, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:50 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r0, r1+60000000}, &(0x7f0000000240)) 06:14:50 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r0, r1+60000000}, &(0x7f0000000240)) 06:14:50 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) 06:14:50 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x0, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:50 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) 06:14:50 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0x0, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:51 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r0, r1+60000000}, &(0x7f0000000240)) 06:14:51 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r0, r1+60000000}, &(0x7f0000000240)) 06:14:51 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) 06:14:51 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) 06:14:51 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) 06:14:51 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r0, r1+60000000}, &(0x7f0000000240)) 06:14:51 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) 06:14:51 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0x0, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:51 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r0, r1+60000000}, &(0x7f0000000240)) 06:14:52 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) 06:14:52 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r0, r1+60000000}, &(0x7f0000000240)) 06:14:52 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) 06:14:52 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) 06:14:52 executing program 5: mlockall(0x4) mlockall(0x7) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r0, r1+60000000}, &(0x7f0000000240)) 06:14:52 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r0, r1+60000000}, &(0x7f0000000240)) 06:14:53 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0x0, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:53 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r0, r1+60000000}, &(0x7f0000000240)) 06:14:53 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) 06:14:53 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) 06:14:53 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) 06:14:53 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) 06:14:53 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) 06:14:53 executing program 5: mlockall(0x4) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r0, r1+60000000}, &(0x7f0000000240)) 06:14:54 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) 06:14:54 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0x0, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:54 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) 06:14:54 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) 06:14:54 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r0, r1+60000000}, &(0x7f0000000240)) 06:14:54 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) 06:14:54 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) 06:14:54 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) 06:14:54 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) 06:14:54 executing program 5: clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r0, r1+60000000}, &(0x7f0000000240)) 06:14:55 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) 06:14:55 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) 06:14:55 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0x0, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:55 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) 06:14:55 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r0, r1+60000000}, &(0x7f0000000240)) 06:14:55 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) 06:14:55 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) 06:14:55 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r0, r1+60000000}, &(0x7f0000000240)) 06:14:55 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) 06:14:55 executing program 5: clock_gettime(0x0, 0x0) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) 06:14:56 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) 06:14:56 executing program 5: clock_gettime(0x0, 0x0) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) 06:14:56 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x0, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:56 executing program 3: mlockall(0x4) mlockall(0x7) prctl$PR_GET_SECCOMP(0x15) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) 06:14:56 executing program 5: clock_gettime(0x0, 0x0) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) 06:14:56 executing program 2: mlockall(0x4) mlockall(0x7) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) 06:14:56 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r0, r1+60000000}, &(0x7f0000000240)) 06:14:56 executing program 5: clock_gettime(0x0, 0x0) nanosleep(0x0, &(0x7f0000000240)) 06:14:56 executing program 5: clock_gettime(0x0, 0x0) nanosleep(0x0, &(0x7f0000000240)) 06:14:56 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r0, r1+60000000}, &(0x7f0000000240)) 06:14:56 executing program 2: mlockall(0x4) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) 06:14:56 executing program 3: mlockall(0x4) mlockall(0x7) prctl$PR_GET_SECCOMP(0x15) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) 06:14:56 executing program 5: clock_gettime(0x0, 0x0) nanosleep(0x0, &(0x7f0000000240)) 06:14:56 executing program 2: nanosleep(&(0x7f0000000200), &(0x7f0000000240)) 06:14:57 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x0, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:57 executing program 3: mlockall(0x4) mlockall(0x7) prctl$PR_GET_SECCOMP(0x15) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) 06:14:57 executing program 5: clock_gettime(0x0, 0x0) nanosleep(&(0x7f0000000200), 0x0) 06:14:57 executing program 2: nanosleep(0x0, &(0x7f0000000240)) 06:14:57 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r0, r1+60000000}, &(0x7f0000000240)) 06:14:57 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r0, r1+60000000}, &(0x7f0000000240)) 06:14:57 executing program 2: nanosleep(0x0, &(0x7f0000000240)) 06:14:57 executing program 5: clock_gettime(0x0, 0x0) nanosleep(&(0x7f0000000200), 0x0) 06:14:57 executing program 3: mlockall(0x4) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) 06:14:57 executing program 2: nanosleep(0x0, &(0x7f0000000240)) 06:14:57 executing program 5: clock_gettime(0x0, 0x0) nanosleep(&(0x7f0000000200), 0x0) 06:14:57 executing program 3: mlockall(0x4) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) 06:14:58 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x0, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:58 executing program 2: nanosleep(&(0x7f0000000200), 0x0) 06:14:58 executing program 5: mlockall(0x4) mlockall(0x7) prctl$PR_GET_SECCOMP(0x15) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) 06:14:58 executing program 3: mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) 06:14:58 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r0, r1+60000000}, &(0x7f0000000240)) 06:14:58 executing program 2: nanosleep(&(0x7f0000000200), 0x0) 06:14:58 executing program 3: mlockall(0x0) prctl$PR_GET_SECCOMP(0x15) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) 06:14:58 executing program 5: mlockall(0x4) mlockall(0x7) prctl$PR_GET_SECCOMP(0x15) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) 06:14:58 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r0, r1+60000000}, &(0x7f0000000240)) 06:14:58 executing program 3: mlockall(0x0) prctl$PR_GET_SECCOMP(0x15) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) 06:14:58 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x0, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:58 executing program 3: mlockall(0x0) prctl$PR_GET_SECCOMP(0x15) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) 06:14:59 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x0, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:59 executing program 5: mlockall(0x4) mlockall(0x7) prctl$PR_GET_SECCOMP(0x15) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) 06:14:59 executing program 3: mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) nanosleep(0x0, &(0x7f0000000240)) 06:14:59 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x0, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:14:59 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r0, r1+60000000}, &(0x7f0000000240)) 06:14:59 executing program 3: mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) nanosleep(0x0, &(0x7f0000000240)) 06:14:59 executing program 5: mlockall(0x4) mlockall(0x7) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) 06:14:59 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r0, r1+60000000}, &(0x7f0000000240)) 06:14:59 executing program 3: mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) nanosleep(0x0, &(0x7f0000000240)) 06:14:59 executing program 3: mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) nanosleep(&(0x7f0000000200), 0x0) 06:14:59 executing program 5: mlockall(0x4) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) 06:14:59 executing program 3: mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) nanosleep(&(0x7f0000000200), 0x0) 06:15:00 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x0, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:00 executing program 5: mlockall(0x4) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) 06:15:00 executing program 3: mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) nanosleep(&(0x7f0000000200), 0x0) 06:15:00 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x0, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:00 executing program 1: mlockall(0x4) mlockall(0x7) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r0, r1+60000000}, &(0x7f0000000240)) 06:15:00 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x0, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:00 executing program 5: nanosleep(&(0x7f0000000200), &(0x7f0000000240)) 06:15:00 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r0, r1+60000000}, &(0x7f0000000240)) 06:15:00 executing program 5: nanosleep(0x0, &(0x7f0000000240)) 06:15:00 executing program 5: nanosleep(0x0, &(0x7f0000000240)) 06:15:00 executing program 5: nanosleep(0x0, &(0x7f0000000240)) 06:15:00 executing program 5: nanosleep(&(0x7f0000000200), 0x0) 06:15:01 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x0, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:01 executing program 5: nanosleep(&(0x7f0000000200), 0x0) 06:15:01 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x0, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:01 executing program 5: nanosleep(&(0x7f0000000200), 0x0) 06:15:01 executing program 1: mlockall(0x4) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r0, r1+60000000}, &(0x7f0000000240)) 06:15:01 executing program 5: nanosleep(&(0x7f0000000200), 0x0) 06:15:01 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r0, r1+60000000}, &(0x7f0000000240)) 06:15:01 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r0, r1+60000000}, &(0x7f0000000240)) 06:15:01 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r0, r1+60000000}, &(0x7f0000000240)) 06:15:02 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x0, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:02 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x0, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:02 executing program 3: mlockall(0x4) mlockall(0x7) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r0, r1+60000000}, &(0x7f0000000240)) 06:15:02 executing program 1: clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r0, r1+60000000}, &(0x7f0000000240)) 06:15:02 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r0, r1+60000000}, &(0x7f0000000240)) 06:15:02 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r0, r1+60000000}, &(0x7f0000000240)) 06:15:03 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x0, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:03 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x0, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:03 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x0, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:03 executing program 1: clock_gettime(0x0, 0x0) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) 06:15:03 executing program 0: mlockall(0x4) mlockall(0x7) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r0, r1+60000000}, &(0x7f0000000240)) 06:15:03 executing program 1: clock_gettime(0x0, 0x0) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) 06:15:03 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x0, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:03 executing program 1: clock_gettime(0x0, 0x0) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) 06:15:03 executing program 1: clock_gettime(0x0, &(0x7f00000001c0)) nanosleep(0x0, &(0x7f0000000240)) 06:15:04 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x0, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:04 executing program 1: clock_gettime(0x0, &(0x7f00000001c0)) nanosleep(0x0, &(0x7f0000000240)) 06:15:04 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x0, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:04 executing program 1: clock_gettime(0x0, &(0x7f00000001c0)) nanosleep(0x0, &(0x7f0000000240)) 06:15:04 executing program 1: clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={0x0, r0+60000000}, &(0x7f0000000240)) 06:15:04 executing program 3: clock_gettime(0x0, &(0x7f00000001c0)) nanosleep(0x0, &(0x7f0000000240)) 06:15:04 executing program 0: mlockall(0x4) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r0, r1+60000000}, &(0x7f0000000240)) 06:15:04 executing program 3: clock_gettime(0x0, &(0x7f00000001c0)) nanosleep(0x0, &(0x7f0000000240)) 06:15:04 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x0, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:04 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r0, r1+60000000}, &(0x7f0000000240)) 06:15:04 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x0, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:05 executing program 1: clock_gettime(0x0, &(0x7f00000001c0)) nanosleep(&(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)) 06:15:05 executing program 1: clock_gettime(0x0, &(0x7f00000001c0)) nanosleep(&(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)) 06:15:05 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x0, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:05 executing program 1: clock_gettime(0x0, &(0x7f00000001c0)) nanosleep(&(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)) 06:15:05 executing program 1: clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={0x0, r0+60000000}, 0x0) 06:15:05 executing program 0: clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r0, r1+60000000}, &(0x7f0000000240)) 06:15:05 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x0, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:05 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r0, r1+60000000}, &(0x7f0000000240)) 06:15:06 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x0, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:06 executing program 3: mlockall(0x4) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r0, r1+60000000}, &(0x7f0000000240)) 06:15:06 executing program 1: clock_gettime(0x0, &(0x7f00000001c0)) nanosleep(&(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)) 06:15:06 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x0, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:06 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x0, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:06 executing program 0: clock_gettime(0x0, 0x0) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) 06:15:06 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x0, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:06 executing program 0: clock_gettime(0x0, 0x0) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) 06:15:06 executing program 0: clock_gettime(0x0, 0x0) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) 06:15:06 executing program 0: clock_gettime(0x0, &(0x7f00000001c0)) nanosleep(0x0, &(0x7f0000000240)) 06:15:07 executing program 0: clock_gettime(0x0, &(0x7f00000001c0)) nanosleep(0x0, &(0x7f0000000240)) 06:15:07 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x0, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:07 executing program 3: clock_gettime(0x0, &(0x7f00000001c0)) nanosleep(0x0, &(0x7f0000000240)) 06:15:07 executing program 0: clock_gettime(0x0, &(0x7f00000001c0)) nanosleep(0x0, &(0x7f0000000240)) 06:15:07 executing program 3: mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) nanosleep(&(0x7f0000000200), 0x0) 06:15:07 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x0, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:07 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x0, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:07 executing program 0: clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={0x0, r0+60000000}, &(0x7f0000000240)) 06:15:07 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x0, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:07 executing program 3: mlockall(0x4) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) 06:15:07 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r0, r1+60000000}, &(0x7f0000000240)) 06:15:08 executing program 0: clock_gettime(0x0, &(0x7f00000001c0)) nanosleep(&(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)) 06:15:08 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x0, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:08 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x0, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:08 executing program 0: clock_gettime(0x0, &(0x7f00000001c0)) nanosleep(&(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)) 06:15:08 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x0, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:08 executing program 0: clock_gettime(0x0, &(0x7f00000001c0)) nanosleep(&(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)) 06:15:08 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x0, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:08 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x0, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:08 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x0, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:08 executing program 0: clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={0x0, r0+60000000}, 0x0) 06:15:08 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:08 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x0, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:09 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:09 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x0, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:09 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:09 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x0, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:09 executing program 0: clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={0x0, r0+60000000}, 0x0) 06:15:09 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x0, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:09 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:10 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x0, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:10 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:10 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x0, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:10 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x0, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:10 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:10 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:10 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x0, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:10 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:10 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:10 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:11 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x0, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:11 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:11 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:11 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:11 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x0, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:11 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:11 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:11 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x0, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:11 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:12 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:12 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:12 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x0, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:12 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x0, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:12 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 255.267951][ T3265] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.274313][ T3265] ieee802154 phy1 wpan1: encryption failed: -22 06:15:12 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:12 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:12 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x0, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:12 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:12 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:12 executing program 2: mlockall(0x4) mlockall(0x7) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:13 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x0, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:13 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:13 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x0, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:13 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:13 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:13 executing program 2: mlockall(0x4) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:13 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:13 executing program 2: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:13 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:13 executing program 2: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:13 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:13 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:14 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:14 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:14 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x0, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:14 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:14 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:14 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:14 executing program 0: mlockall(0x4) mlockall(0x7) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:14 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:14 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:14 executing program 2: syz_io_uring_setup(0x3908, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:14 executing program 5: mlockall(0x4) mlockall(0x7) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:14 executing program 2: syz_io_uring_setup(0x3908, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:15 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:15 executing program 0: mlockall(0x4) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:15 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x0, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:15 executing program 2: syz_io_uring_setup(0x3908, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:15 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:15 executing program 5: mlockall(0x4) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:15 executing program 0: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:15 executing program 2: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:15 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:15 executing program 5: mlockall(0x4) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:15 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:15 executing program 2: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:16 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:16 executing program 5: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:16 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x0, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:16 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:16 executing program 2: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:16 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:16 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:16 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:16 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:16 executing program 2: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:16 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:16 executing program 0: syz_io_uring_setup(0x3908, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:17 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x8, [0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:17 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:17 executing program 2: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x4, 0x0, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:17 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x0, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:17 executing program 0: syz_io_uring_setup(0x3908, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:17 executing program 1: mlockall(0x4) mlockall(0x7) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:17 executing program 5: syz_io_uring_setup(0x3908, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:17 executing program 0: syz_io_uring_setup(0x3908, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:17 executing program 2: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:17 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:17 executing program 0: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:17 executing program 5: syz_io_uring_setup(0x3908, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:18 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x8, [0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:18 executing program 1: mlockall(0x4) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:18 executing program 2: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, 0x0, &(0x7f00000003c0)) 06:15:18 executing program 5: syz_io_uring_setup(0x3908, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:18 executing program 0: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:18 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:18 executing program 5: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:18 executing program 2: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, 0x0, &(0x7f00000003c0)) 06:15:18 executing program 0: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:18 executing program 1: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:18 executing program 5: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:18 executing program 2: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, 0x0, &(0x7f00000003c0)) 06:15:19 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x8, [0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:19 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:19 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:19 executing program 0: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:19 executing program 5: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:19 executing program 2: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:19 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:19 executing program 5: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x0, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:19 executing program 2: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:19 executing program 0: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x4, 0x0, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:19 executing program 2: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:19 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:20 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x8, [0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:20 executing program 5: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x0, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:20 executing program 0: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:20 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:20 executing program 1: syz_io_uring_setup(0x3908, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:20 executing program 2: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x0, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:20 executing program 2: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x0, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:20 executing program 0: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, 0x0, &(0x7f00000003c0)) 06:15:20 executing program 1: syz_io_uring_setup(0x3908, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:20 executing program 5: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x0, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:20 executing program 1: syz_io_uring_setup(0x3908, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:20 executing program 5: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x0, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:21 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x8, [0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:21 executing program 0: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, 0x0, &(0x7f00000003c0)) 06:15:21 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:21 executing program 2: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x0, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:21 executing program 1: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:21 executing program 5: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:21 executing program 1: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:21 executing program 5: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:21 executing program 0: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, 0x0, &(0x7f00000003c0)) 06:15:21 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0xb554, 0x0, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:21 executing program 5: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, 0x0, &(0x7f00000003c0)) 06:15:21 executing program 1: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:22 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x8, [0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:22 executing program 0: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:22 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0xb554, 0x0, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:22 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:22 executing program 1: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:22 executing program 5: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, 0x0, &(0x7f00000003c0)) 06:15:22 executing program 0: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:22 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0xb554, 0x0, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:22 executing program 5: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, 0x0, &(0x7f00000003c0)) 06:15:22 executing program 1: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x4, 0x0, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:22 executing program 0: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:22 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:23 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, 0x0) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:23 executing program 2: syz_io_uring_setup(0x3908, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:23 executing program 1: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:23 executing program 5: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:23 executing program 0: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:23 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:23 executing program 1: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, 0x0, &(0x7f00000003c0)) 06:15:23 executing program 0: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:23 executing program 2: syz_io_uring_setup(0x3908, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:23 executing program 5: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:23 executing program 0: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:23 executing program 3: mlockall(0x4) mlockall(0x7) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:23 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, 0x0) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:23 executing program 1: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, 0x0, &(0x7f00000003c0)) 06:15:23 executing program 2: syz_io_uring_setup(0x3908, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:23 executing program 5: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:23 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:23 executing program 2: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:23 executing program 1: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, 0x0, &(0x7f00000003c0)) 06:15:23 executing program 5: syz_io_uring_setup(0x3908, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:23 executing program 0: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:23 executing program 3: mlockall(0x4) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:24 executing program 5: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:24 executing program 1: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:24 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, 0x0) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:24 executing program 2: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:24 executing program 0: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:24 executing program 3: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:24 executing program 2: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:24 executing program 1: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:24 executing program 5: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:24 executing program 0: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:24 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:24 executing program 2: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:24 executing program 1: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:24 executing program 5: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:24 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)) nanosleep(0x0, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:24 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:24 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:24 executing program 2: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:24 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:24 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:24 executing program 1: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:24 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, 0x0, 0x0) 06:15:25 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)) nanosleep(0x0, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:25 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:25 executing program 1: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:25 executing program 2: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:25 executing program 3: syz_io_uring_setup(0x3908, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:25 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)) nanosleep(0x0, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:25 executing program 1: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:25 executing program 2: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, 0x0, &(0x7f00000003c0)) 06:15:25 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:25 executing program 3: syz_io_uring_setup(0x3908, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:25 executing program 5: syz_io_uring_setup(0x3908, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:25 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:25 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)) nanosleep(0x0, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:25 executing program 2: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, 0x0, &(0x7f00000003c0)) 06:15:25 executing program 3: syz_io_uring_setup(0x3908, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:25 executing program 0: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, 0x0, &(0x7f00000003c0)) 06:15:25 executing program 5: syz_io_uring_setup(0x3908, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:25 executing program 2: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, 0x0, &(0x7f00000003c0)) 06:15:25 executing program 1: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:25 executing program 3: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:26 executing program 0: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:26 executing program 5: syz_io_uring_setup(0x3908, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:26 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={0x0, r2+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:26 executing program 1: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:26 executing program 2: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:26 executing program 3: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:26 executing program 0: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:26 executing program 5: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:26 executing program 3: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:26 executing program 1: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:26 executing program 2: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:26 executing program 5: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:26 executing program 0: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:26 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:27 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={0x0, r2+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:27 executing program 3: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:27 executing program 2: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:27 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:27 executing program 5: syz_io_uring_setup(0x3908, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:27 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, 0x0, 0x0) 06:15:27 executing program 2: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:27 executing program 5: syz_io_uring_setup(0x3908, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, 0x0, &(0x7f00000003c0)) 06:15:27 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:27 executing program 1: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:27 executing program 3: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x4, 0x0, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:27 executing program 5: syz_io_uring_setup(0x3908, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, 0x0, &(0x7f00000003c0)) 06:15:28 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={0x0, r2+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:28 executing program 1: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:28 executing program 3: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:28 executing program 2: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:28 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:28 executing program 5: syz_io_uring_setup(0x3908, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, 0x0, &(0x7f00000003c0)) 06:15:28 executing program 5: syz_io_uring_setup(0x3908, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:28 executing program 3: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, 0x0, &(0x7f00000003c0)) 06:15:28 executing program 0: syz_io_uring_setup(0x3908, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:28 executing program 2: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:28 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={0x0, r2+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:28 executing program 5: syz_io_uring_setup(0x3908, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:28 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) nanosleep(&(0x7f0000000200)={r2, 0x0}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:28 executing program 3: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, 0x0, &(0x7f00000003c0)) 06:15:28 executing program 0: syz_io_uring_setup(0x3908, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:28 executing program 2: syz_io_uring_setup(0x3908, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:28 executing program 5: syz_io_uring_setup(0x3908, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:29 executing program 0: syz_io_uring_setup(0x3908, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:29 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={0x0, r2+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:29 executing program 3: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, 0x0, &(0x7f00000003c0)) 06:15:29 executing program 0: syz_io_uring_setup(0x3908, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:29 executing program 5: syz_io_uring_setup(0x3908, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:29 executing program 1: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:29 executing program 0: syz_io_uring_setup(0x3908, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, 0x0, &(0x7f00000003c0)) 06:15:29 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) nanosleep(&(0x7f0000000200)={r2, 0x0}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:29 executing program 3: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:29 executing program 5: syz_io_uring_setup(0x3908, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:29 executing program 0: syz_io_uring_setup(0x3908, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, 0x0, &(0x7f00000003c0)) 06:15:29 executing program 1: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:30 executing program 3: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:30 executing program 2: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:30 executing program 5: syz_io_uring_setup(0x3908, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:30 executing program 0: syz_io_uring_setup(0x3908, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, 0x0, &(0x7f00000003c0)) 06:15:30 executing program 1: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:30 executing program 3: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:30 executing program 0: syz_io_uring_setup(0x3908, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:30 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) nanosleep(&(0x7f0000000200)={r2, 0x0}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:30 executing program 5: syz_io_uring_setup(0x3908, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, 0x0, &(0x7f00000003c0)) 06:15:30 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:30 executing program 2: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:30 executing program 3: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:30 executing program 0: syz_io_uring_setup(0x3908, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:31 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) nanosleep(&(0x7f0000000200)={r2, 0x0}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:31 executing program 0: syz_io_uring_setup(0x3908, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:31 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:31 executing program 2: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:31 executing program 3: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:31 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:31 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, 0x0) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:31 executing program 0: syz_io_uring_setup(0x3908, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:31 executing program 3: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:31 executing program 2: syz_io_uring_setup(0x3908, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:31 executing program 1: syz_io_uring_setup(0x3908, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:32 executing program 1: syz_io_uring_setup(0x3908, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:32 executing program 5: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:32 executing program 2: syz_io_uring_setup(0x3908, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:32 executing program 0: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:32 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:32 executing program 1: syz_io_uring_setup(0x3908, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:32 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:32 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, 0x0) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:32 executing program 0: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, 0x0, &(0x7f00000003c0)) 06:15:32 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)) nanosleep(0x0, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:32 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)) nanosleep(0x0, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:32 executing program 1: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:32 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:33 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, 0x0) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:33 executing program 3: syz_io_uring_setup(0x3908, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:33 executing program 1: syz_io_uring_setup(0x3908, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:33 executing program 2: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:33 executing program 1: syz_io_uring_setup(0x3908, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:33 executing program 3: syz_io_uring_setup(0x3908, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:34 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, 0x0) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:34 executing program 5: syz_io_uring_setup(0x3908, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:34 executing program 3: syz_io_uring_setup(0x3908, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:34 executing program 2: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:34 executing program 1: syz_io_uring_setup(0x3908, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, 0x0, &(0x7f00000003c0)) 06:15:34 executing program 1: syz_io_uring_setup(0x3908, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, 0x0, &(0x7f00000003c0)) 06:15:34 executing program 0: syz_io_uring_setup(0x3908, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:34 executing program 3: syz_io_uring_setup(0x3908, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:34 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, 0x0) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:34 executing program 5: mlockall(0x4) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:34 executing program 1: syz_io_uring_setup(0x3908, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, 0x0, &(0x7f00000003c0)) 06:15:34 executing program 0: syz_io_uring_setup(0x3908, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:35 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x0) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:35 executing program 3: syz_io_uring_setup(0x3908, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, 0x0, &(0x7f00000003c0)) 06:15:35 executing program 5: mlockall(0x4) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:35 executing program 1: syz_io_uring_setup(0x3908, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:35 executing program 0: syz_io_uring_setup(0x3908, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, 0x0, &(0x7f00000003c0)) 06:15:35 executing program 5: mlockall(0x4) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:35 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, 0x0) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:35 executing program 3: syz_io_uring_setup(0x3908, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, 0x0, &(0x7f00000003c0)) 06:15:35 executing program 2: syz_io_uring_setup(0x3908, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:35 executing program 1: syz_io_uring_setup(0x3908, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:35 executing program 5: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:35 executing program 3: syz_io_uring_setup(0x3908, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, 0x0, &(0x7f00000003c0)) 06:15:36 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x0) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:36 executing program 1: syz_io_uring_setup(0x3908, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:36 executing program 2: syz_io_uring_setup(0x3908, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:36 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:36 executing program 3: syz_io_uring_setup(0x3908, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:36 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:36 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, 0x0) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:36 executing program 1: syz_io_uring_setup(0x3908, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:36 executing program 2: syz_io_uring_setup(0x3908, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, 0x0, &(0x7f00000003c0)) 06:15:36 executing program 3: syz_io_uring_setup(0x3908, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:36 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:36 executing program 1: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:37 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x0) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:37 executing program 3: syz_io_uring_setup(0x3908, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:37 executing program 2: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x0, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:37 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:37 executing program 1: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:37 executing program 0: syz_io_uring_setup(0x3908, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:37 executing program 0: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:37 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:37 executing program 2: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x0, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:37 executing program 1: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:37 executing program 3: syz_io_uring_setup(0x3908, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:37 executing program 0: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:38 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, &(0x7f00000002c0)) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:38 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:38 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:38 executing program 2: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:38 executing program 3: syz_io_uring_setup(0x3908, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:38 executing program 0: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:38 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:38 executing program 1: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:38 executing program 0: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:38 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x0) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:38 executing program 2: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:38 executing program 1: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:39 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, &(0x7f00000002c0)) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:39 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:39 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:39 executing program 2: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:39 executing program 1: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:39 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:39 executing program 2: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:39 executing program 0: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:39 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, 0x0, &(0x7f00000003c0)) 06:15:39 executing program 3: mlockall(0x4) mlockall(0x7) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:39 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:39 executing program 2: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:40 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, &(0x7f00000002c0)) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:40 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, 0x0, &(0x7f00000003c0)) 06:15:40 executing program 0: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:40 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:40 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:40 executing program 3: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:40 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, 0x0, &(0x7f00000003c0)) 06:15:40 executing program 0: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:40 executing program 3: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:40 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, 0x0, &(0x7f00000003c0)) 06:15:40 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:40 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:41 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280), &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:41 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x0, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:41 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:41 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:41 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, 0x0, &(0x7f00000003c0)) 06:15:41 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:41 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, 0x0, &(0x7f00000003c0)) 06:15:41 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:41 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:41 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:41 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:41 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:42 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280), &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:42 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:42 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:42 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, 0x0, &(0x7f00000003c0)) 06:15:42 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:42 executing program 3: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:42 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, 0x0, &(0x7f00000003c0)) 06:15:42 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:42 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:42 executing program 3: syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:42 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:42 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, 0x0, &(0x7f00000003c0)) 06:15:43 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280), &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:43 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:43 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:43 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, 0x0, &(0x7f00000003c0)) 06:15:43 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:43 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x0, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:43 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, 0x0, &(0x7f00000003c0)) 06:15:43 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:43 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, 0x0, &(0x7f00000003c0)) 06:15:43 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:43 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:44 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:44 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, 0x0) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:44 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280), &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:44 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:44 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:44 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x0, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:44 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x0, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:44 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000300), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), 0x0) 06:15:44 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280), &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:45 executing program 1: mlockall(0x4) mlockall(0x7) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:45 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, 0x0) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:45 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x0, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:45 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x0, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:45 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x0, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:45 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:45 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:45 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:46 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:46 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x0, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:46 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, 0x0) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:46 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:46 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x0, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:46 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x0, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:46 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x0, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:46 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:47 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:47 executing program 1: clock_gettime(0x0, &(0x7f00000001c0)) nanosleep(&(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)) 06:15:47 executing program 3: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x0, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:47 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x0) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:47 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x0, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 06:15:47 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() 06:15:47 executing program 5: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x0, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x2) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:47 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r0, r1+60000000}, &(0x7f0000000240)) 06:15:47 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) 06:15:48 executing program 2: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r0, r1+60000000}, &(0x7f0000000240)) 06:15:48 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) 06:15:48 executing program 3: clock_gettime(0x0, 0x0) nanosleep(0x0, &(0x7f0000000240)) 06:15:48 executing program 4: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x10000, &(0x7f00000000c0)=[r0], 0x1, 0x0, 0x0, {0x0, r1}}, 0x5) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7, 0x0, 0x100000001, 0x6, 0x219c, 0xffffffffffffffb6, 0xffffffff, 0x9, 0x100, 0x5, 0x5, 0x1c14, 0x40, 0x21de}, 0x10, [0x0, 0x0]}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)) mlockall(0x4) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) mlockall(0x0) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) syz_io_uring_setup(0x3908, &(0x7f0000000300)={0x0, 0xb554, 0x4, 0x2, 0xa6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x5) 06:15:48 executing program 1: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) clock_gettime(0x5, &(0x7f0000000080)) mlockall(0x4) getegid() io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) nanosleep(&(0x7f0000000200)={r0, r1+60000000}, &(0x7f0000000240)) 06:15:48 executing program 3: mlockall(0x4) mlockall(0x7) nanosleep(&(0x7f0000000200), &(0x7f0000000240)) 06:15:48 executing program 0: mlockall(0x4) mlockall(0x7) mlockall(0x2) prctl$PR_GET_SECCOMP(0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='qgroup_meta_convert\x00'}, 0x10) 06:15:48 executing program 5: clock_gettime(0x0, 0x0) nanosleep(0x0, &(0x7f0000000240)) 06:15:48 executing program 5: clock_gettime(0x0, 0x0) nanosleep(0x0, &(0x7f0000000240)) [ 291.718459][T16227] BUG: sleeping function called from invalid context at include/linux/pagemap.h:674 [ 291.728539][T16227] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 16227, name: syz-executor.3 [ 291.738108][T16227] 1 lock held by syz-executor.3/16227: [ 291.743551][T16227] #0: ffff88801e28a018 (ptlock_ptr(page)#2){+.+.}-{2:2}, at: page_vma_mapped_walk+0xd87/0x24f0 [ 291.754209][T16227] Preemption disabled at: [ 291.754216][T16227] [<0000000000000000>] 0x0 [ 291.763117][T16227] CPU: 1 PID: 16227 Comm: syz-executor.3 Not tainted 5.13.0-next-20210709-syzkaller #0 [ 291.772739][T16227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 291.782775][T16227] Call Trace: [ 291.786037][T16227] dump_stack_lvl+0xcd/0x134 [ 291.790689][T16227] ___might_sleep.cold+0x1f1/0x237 [ 291.795796][T16227] __munlock_pagevec+0xa22/0x2340 [ 291.800877][T16227] ? __munlock_isolated_page+0x410/0x410 [ 291.806516][T16227] ? munlock_vma_pages_range+0x9c8/0xf00 [ 291.812138][T16227] ? lock_downgrade+0x6e0/0x6e0 [ 291.817045][T16227] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 291.822806][T16227] ? vm_normal_page+0x146/0x2a0 [ 291.827652][T16227] munlock_vma_pages_range+0x9d7/0xf00 [ 291.833101][T16227] ? munlock_vma_page+0x5c0/0x5c0 [ 291.838116][T16227] ? lock_downgrade+0x6e0/0x6e0 [ 291.842976][T16227] ? kasan_quarantine_put+0xf5/0x210 [ 291.848293][T16227] exit_mmap+0x47a/0x620 [ 291.852520][T16227] ? __ia32_sys_remap_file_pages+0x150/0x150 [ 291.858484][T16227] ? rcu_read_lock_sched_held+0x3a/0x70 [ 291.864081][T16227] ? kmem_cache_free+0x27b/0x5a0 [ 291.869009][T16227] ? __khugepaged_exit+0x2b8/0x470 [ 291.874155][T16227] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 291.880388][T16227] __mmput+0x122/0x470 [ 291.884528][T16227] mmput+0x58/0x60 [ 291.888238][T16227] do_exit+0xae2/0x2a60 [ 291.892376][T16227] ? preempt_schedule_thunk+0x16/0x18 [ 291.897743][T16227] ? mm_update_next_owner+0x7a0/0x7a0 [ 291.903093][T16227] ? preempt_schedule_thunk+0x16/0x18 [ 291.908447][T16227] ? trace_hardirqs_on+0x38/0x1c0 [ 291.913503][T16227] do_group_exit+0x125/0x310 [ 291.918075][T16227] __x64_sys_exit_group+0x3a/0x50 [ 291.923079][T16227] do_syscall_64+0x35/0xb0 [ 291.927496][T16227] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 291.933409][T16227] RIP: 0033:0x4665d9 [ 291.937288][T16227] Code: Unable to access opcode bytes at RIP 0x4665af. [ 291.944116][T16227] RSP: 002b:00007ffdfa966478 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 291.952526][T16227] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00000000004665d9 [ 291.960487][T16227] RDX: 00000000004193eb RSI: ffffffffffffffbc RDI: 0000000000000000 [ 291.968444][T16227] RBP: 0000000000000000 R08: 0000001b2cb20838 R09: 0000000000000000 [ 291.976394][T16227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.984346][T16227] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffdfa966570 [ 291.993043][T16227] [ 291.995360][T16227] ============================= [ 292.000186][T16227] [ BUG: Invalid wait context ] [ 292.005007][T16227] 5.13.0-next-20210709-syzkaller #0 Tainted: G W [ 292.012651][T16227] ----------------------------- [ 292.017472][T16227] syz-executor.3/16227 is trying to lock: [ 292.023162][T16227] ffff88803794e000 (&mapping->i_mmap_rwsem){++++}-{3:3}, at: rmap_walk_file+0x52f/0x710 [ 292.033038][T16227] other info that might help us debug this: [ 292.038900][T16227] context-{4:4} [ 292.042332][T16227] 1 lock held by syz-executor.3/16227: [ 292.047759][T16227] #0: ffff88801e28a018 (ptlock_ptr(page)#2){+.+.}-{2:2}, at: page_vma_mapped_walk+0xd87/0x24f0 [ 292.058167][T16227] stack backtrace: [ 292.061858][T16227] CPU: 1 PID: 16227 Comm: syz-executor.3 Tainted: G W 5.13.0-next-20210709-syzkaller #0 [ 292.072851][T16227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 292.082882][T16227] Call Trace: [ 292.086142][T16227] dump_stack_lvl+0xcd/0x134 [ 292.090734][T16227] __lock_acquire.cold+0x213/0x3ab [ 292.095828][T16227] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 292.101785][T16227] ? __lock_acquire+0xbc2/0x54a0 [ 292.106712][T16227] lock_acquire+0x1ab/0x510 [ 292.111193][T16227] ? rmap_walk_file+0x52f/0x710 [ 292.116028][T16227] ? lock_release+0x720/0x720 [ 292.120678][T16227] ? wake_up_klogd.part.0+0x8e/0xd0 [ 292.125858][T16227] down_read+0x9a/0x440 [ 292.130031][T16227] ? rmap_walk_file+0x52f/0x710 [ 292.134867][T16227] ? rwsem_down_read_slowpath+0x990/0x990 [ 292.140570][T16227] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 292.146835][T16227] rmap_walk_file+0x52f/0x710 [ 292.151574][T16227] rmap_walk+0x10d/0x190 [ 292.155794][T16227] page_mlock+0x448/0x650 [ 292.160098][T16227] ? page_mkclean+0x2c0/0x2c0 [ 292.164752][T16227] ? page_mkclean_one+0x4e0/0x4e0 [ 292.169761][T16227] ? anon_vma_ctor+0xe0/0xe0 [ 292.174329][T16227] ? page_get_anon_vma+0x380/0x380 [ 292.179425][T16227] ? dump_stack_lvl+0x12a/0x134 [ 292.184257][T16227] ? dump_stack_lvl+0x12c/0x134 [ 292.189192][T16227] __munlock_isolated_page+0x88/0x410 [ 292.194545][T16227] __munlock_pagevec+0xd7f/0x2340 [ 292.199569][T16227] ? __munlock_isolated_page+0x410/0x410 [ 292.205189][T16227] ? munlock_vma_pages_range+0x9c8/0xf00 [ 292.210804][T16227] ? lock_downgrade+0x6e0/0x6e0 [ 292.215628][T16227] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 292.221326][T16227] ? vm_normal_page+0x146/0x2a0 [ 292.226170][T16227] munlock_vma_pages_range+0x9d7/0xf00 [ 292.231617][T16227] ? munlock_vma_page+0x5c0/0x5c0 [ 292.236612][T16227] ? lock_downgrade+0x6e0/0x6e0 [ 292.241468][T16227] ? kasan_quarantine_put+0xf5/0x210 [ 292.246735][T16227] exit_mmap+0x47a/0x620 [ 292.250960][T16227] ? __ia32_sys_remap_file_pages+0x150/0x150 [ 292.256914][T16227] ? rcu_read_lock_sched_held+0x3a/0x70 [ 292.262436][T16227] ? kmem_cache_free+0x27b/0x5a0 [ 292.267350][T16227] ? __khugepaged_exit+0x2b8/0x470 [ 292.272442][T16227] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 292.278663][T16227] __mmput+0x122/0x470 [ 292.282713][T16227] mmput+0x58/0x60 [ 292.286414][T16227] do_exit+0xae2/0x2a60 [ 292.290559][T16227] ? preempt_schedule_thunk+0x16/0x18 [ 292.295912][T16227] ? mm_update_next_owner+0x7a0/0x7a0 [ 292.301280][T16227] ? preempt_schedule_thunk+0x16/0x18 [ 292.306648][T16227] ? trace_hardirqs_on+0x38/0x1c0 [ 292.311696][T16227] do_group_exit+0x125/0x310 [ 292.316280][T16227] __x64_sys_exit_group+0x3a/0x50 [ 292.321323][T16227] do_syscall_64+0x35/0xb0 [ 292.325723][T16227] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 292.331595][T16227] RIP: 0033:0x4665d9 [ 292.335463][T16227] Code: Unable to access opcode bytes at RIP 0x4665af. [ 292.342281][T16227] RSP: 002b:00007ffdfa966478 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 292.350670][T16227] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00000000004665d9 [ 292.358618][T16227] RDX: 00000000004193eb RSI: ffffffffffffffbc RDI: 0000000000000000 [ 292.366565][T16227] RBP: 0000000000000000 R08: 0000001b2cb20838 R09: 0000000000000000 [ 292.374515][T16227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.382479][T16227] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffdfa966570