}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x1100}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:32:49 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xed01, 0x0, 0x0) 15:32:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x4000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:32:50 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x6c010000, 0x0, 0x0) 15:32:50 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000000c0)={0x3}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) [ 2564.086883][T28927] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2564.095513][T28927] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1299 sclass=netlink_route_socket pid=28927 comm=syz-executor.0 [ 2564.110364][T28927] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2564.110532][T28936] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1299 sclass=netlink_route_socket pid=28936 comm=syz-executor.0 15:32:50 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xee00, 0x0, 0x0) 15:32:50 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024", 0x21}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x700) 15:32:50 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000000c0)={0x3}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) 15:32:50 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x6d000000, 0x0, 0x0) 15:32:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001306034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 15:32:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x80fe}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:32:50 executing program 2: r0 = epoll_create(0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x3}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r2, &(0x7f0000000080)) 15:32:50 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x6d010000, 0x0, 0x0) 15:32:50 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xee01, 0x0, 0x0) 15:32:50 executing program 2: r0 = epoll_create(0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x3}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r2, &(0x7f0000000080)) 15:32:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0xc805}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:32:50 executing program 2: r0 = epoll_create(0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x3}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r2, &(0x7f0000000080)) 15:32:50 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x6e000000, 0x0, 0x0) [ 2564.993426][T28980] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2565.002129][T28980] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1555 sclass=netlink_route_socket pid=28980 comm=syz-executor.0 [ 2565.016321][T28980] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2565.016386][T28982] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1555 sclass=netlink_route_socket pid=28982 comm=syz-executor.0 15:32:51 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024", 0x21}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x900) 15:32:51 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xef00, 0x0, 0x0) 15:32:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0xfc00}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:32:51 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x6e010000, 0x0, 0x0) 15:32:51 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) 15:32:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001307034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 15:32:51 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xef01, 0x0, 0x0) 15:32:51 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) 15:32:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0xfe80}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:32:51 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x6f000000, 0x0, 0x0) 15:32:51 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) 15:32:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0xff00}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:32:52 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024", 0x21}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xec0) 15:32:52 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xf000, 0x0, 0x0) 15:32:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x34000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:32:52 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) 15:32:52 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x6f010000, 0x0, 0x0) 15:32:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001308034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 15:32:52 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) 15:32:52 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xf001, 0x0, 0x0) 15:32:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x40000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:32:52 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r2, &(0x7f0000000080)) [ 2566.664118][T29045] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 15:32:52 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x70000000, 0x0, 0x0) 15:32:52 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r2, &(0x7f0000000080)) [ 2566.808870][T29056] selinux_netlink_send: 1 callbacks suppressed [ 2566.808884][T29056] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2067 sclass=netlink_route_socket pid=29056 comm=syz-executor.0 [ 2566.830536][T29056] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2067 sclass=netlink_route_socket pid=29056 comm=syz-executor.0 [ 2566.830716][T29045] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 15:32:53 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024", 0x21}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xf00) 15:32:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x400300}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:32:53 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x70010000, 0x0, 0x0) 15:32:53 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xf100, 0x0, 0x0) 15:32:53 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r2, &(0x7f0000000080)) 15:32:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001309034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 15:32:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x1000000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:32:53 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x71000000, 0x0, 0x0) 15:32:53 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xf101, 0x0, 0x0) 15:32:53 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) 15:32:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x2000000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:32:53 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) [ 2567.688924][T29123] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2567.697743][T29123] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2323 sclass=netlink_route_socket pid=29123 comm=syz-executor.0 [ 2567.711637][T29123] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2567.711732][T29125] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2323 sclass=netlink_route_socket pid=29125 comm=syz-executor.0 15:32:54 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024", 0x21}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xfb4) 15:32:54 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xf200, 0x0, 0x0) 15:32:54 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x71010000, 0x0, 0x0) 15:32:54 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) 15:32:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x3000000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:32:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="39000000130a034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 15:32:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:32:54 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000), 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r2, &(0x7f0000000080)) 15:32:54 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xf201, 0x0, 0x0) 15:32:54 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x72000000, 0x0, 0x0) 15:32:54 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000), 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r2, &(0x7f0000000080)) 15:32:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x5000000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) [ 2568.559112][T29179] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2568.567657][T29179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2579 sclass=netlink_route_socket pid=29179 comm=syz-executor.0 [ 2568.582026][T29181] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2579 sclass=netlink_route_socket pid=29181 comm=syz-executor.0 [ 2568.582056][T29179] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 15:32:55 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024", 0x21}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x166b) 15:32:55 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x72010000, 0x0, 0x0) 15:32:55 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xf300, 0x0, 0x0) 15:32:55 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000), 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r2, &(0x7f0000000080)) 15:32:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x6000000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:32:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="39000000130b034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 15:32:55 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xf301, 0x0, 0x0) 15:32:55 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) 15:32:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x7000000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:32:55 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x73000000, 0x0, 0x0) 15:32:55 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xf400, 0x0, 0x0) 15:32:55 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x73010000, 0x0, 0x0) [ 2569.454722][T29230] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2569.463497][T29230] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2835 sclass=netlink_route_socket pid=29230 comm=syz-executor.0 [ 2569.477102][T29230] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2569.477918][T29236] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2835 sclass=netlink_route_socket pid=29236 comm=syz-executor.0 15:32:56 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024", 0x21}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x3000) 15:32:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x8000000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:32:56 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) 15:32:56 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x74000000, 0x0, 0x0) 15:32:56 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xf401, 0x0, 0x0) 15:32:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="39000000130c034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 15:32:56 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) 15:32:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x10000120}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:32:56 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xf500, 0x0, 0x0) 15:32:56 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) 15:32:56 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x74010000, 0x0, 0x0) 15:32:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x10080000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) [ 2570.362873][T29286] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2570.371751][T29286] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3091 sclass=netlink_route_socket pid=29286 comm=syz-executor.0 [ 2570.385458][T29286] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2570.385465][T29287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3091 sclass=netlink_route_socket pid=29287 comm=syz-executor.0 15:32:57 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024", 0x21}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x3900) 15:32:57 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xf501, 0x0, 0x0) 15:32:57 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x75000000, 0x0, 0x0) 15:32:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x11000000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:32:57 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) 15:32:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="39000000130d034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 15:32:57 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xf600, 0x0, 0x0) 15:32:57 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x75010000, 0x0, 0x0) 15:32:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x20010010}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:32:57 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xf601, 0x0, 0x0) 15:32:57 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) 15:32:57 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x76000000, 0x0, 0x0) [ 2571.280426][T29354] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2571.290123][T29354] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 15:32:57 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024", 0x21}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x6b16) 15:32:57 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xf700, 0x0, 0x0) 15:32:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x40000000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:32:57 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x76010000, 0x0, 0x0) 15:32:57 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0xa, r3, &(0x7f0000000080)) 15:32:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="39000000130e034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 15:32:57 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x77000000, 0x0, 0x0) 15:32:57 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0xa, r3, &(0x7f0000000080)) 15:32:57 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xf701, 0x0, 0x0) 15:32:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x7ffffff7}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:32:58 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x77010000, 0x0, 0x0) 15:32:58 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0xa, r3, &(0x7f0000000080)) [ 2572.137090][T29403] selinux_netlink_send: 2 callbacks suppressed [ 2572.137103][T29403] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3603 sclass=netlink_route_socket pid=29403 comm=syz-executor.0 [ 2572.157148][T29404] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3603 sclass=netlink_route_socket pid=29404 comm=syz-executor.0 15:32:58 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024", 0x21}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xb40f) 15:32:58 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xf800, 0x0, 0x0) 15:32:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x97ffffff}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:32:58 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x78000000, 0x0, 0x0) 15:32:58 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, 0xffffffffffffffff, &(0x7f0000000080)) 15:32:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001310034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 15:32:58 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, 0xffffffffffffffff, &(0x7f0000000080)) 15:32:58 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x78010000, 0x0, 0x0) 15:32:58 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xf801, 0x0, 0x0) 15:32:58 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x79000000, 0x0, 0x0) [ 2572.892015][T29426] validate_nla: 2 callbacks suppressed [ 2572.892030][T29426] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 15:32:58 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, 0xffffffffffffffff, &(0x7f0000000080)) 15:32:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0xc8050000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) [ 2572.953052][T29436] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4115 sclass=netlink_route_socket pid=29436 comm=syz-executor.0 [ 2573.019076][T29436] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4115 sclass=netlink_route_socket pid=29436 comm=syz-executor.0 [ 2573.019571][T29426] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 15:32:59 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x79010000, 0x0, 0x0) 15:32:59 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024", 0x21}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xc00e) 15:32:59 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xf900, 0x0, 0x0) 15:32:59 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, 0x0) 15:32:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001311034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 15:32:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0xe0ffffff}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:32:59 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, 0x0) 15:32:59 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xf901, 0x0, 0x0) 15:32:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0xeffdffff}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:32:59 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, 0x0) 15:32:59 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x7a000000, 0x0, 0x0) [ 2573.807578][T29483] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2573.816270][T29483] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4371 sclass=netlink_route_socket pid=29483 comm=syz-executor.0 15:32:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0xf5ffffff}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:32:59 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x7a010000, 0x0, 0x0) [ 2573.924203][T29483] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2573.934627][T29506] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4371 sclass=netlink_route_socket pid=29506 comm=syz-executor.0 15:33:00 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024", 0x21}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x34000) 15:33:00 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xfa00, 0x0, 0x0) 15:33:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0xf7ffff7f}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:00 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) (fail_nth: 1) 15:33:00 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x7b000000, 0x0, 0x0) 15:33:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001312034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) [ 2574.579448][T29513] FAULT_INJECTION: forcing a failure. [ 2574.579448][T29513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2574.592545][T29513] CPU: 1 PID: 29513 Comm: syz-executor.2 Not tainted 5.15.0-rc2-syzkaller #0 [ 2574.601308][T29513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2574.611553][T29513] Call Trace: [ 2574.614828][T29513] dump_stack_lvl+0xd6/0x122 [ 2574.619421][T29513] dump_stack+0x11/0x1b [ 2574.623704][T29513] should_fail+0x23c/0x250 15:33:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0xfc000000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) [ 2574.628172][T29513] should_fail_usercopy+0x16/0x20 [ 2574.633504][T29513] _copy_from_user+0x1c/0xd0 [ 2574.638090][T29513] __x64_sys_epoll_ctl+0x8a/0xf0 [ 2574.643032][T29513] do_syscall_64+0x44/0xa0 [ 2574.647480][T29513] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2574.653379][T29513] RIP: 0033:0x7f4e2a09d709 [ 2574.657898][T29513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 15:33:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0xfe800000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) [ 2574.677680][T29513] RSP: 002b:00007f4e27e15188 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 2574.686088][T29513] RAX: ffffffffffffffda RBX: 00007f4e2a1a1f60 RCX: 00007f4e2a09d709 [ 2574.694147][T29513] RDX: 0000000000000007 RSI: 000000000000000a RDI: 0000000000000003 [ 2574.702139][T29513] RBP: 00007f4e27e151d0 R08: 0000000000000000 R09: 0000000000000000 [ 2574.710289][T29513] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000001 [ 2574.718435][T29513] R13: 00007ffca717a16f R14: 00007f4e27e15300 R15: 0000000000022000 15:33:00 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xfa01, 0x0, 0x0) 15:33:00 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) (fail_nth: 2) [ 2574.756055][T29530] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 15:33:00 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xfb00, 0x0, 0x0) [ 2574.801288][T29530] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4627 sclass=netlink_route_socket pid=29530 comm=syz-executor.0 [ 2574.815618][T29530] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2574.835238][T29538] FAULT_INJECTION: forcing a failure. [ 2574.835238][T29538] name fail_usercopy, interval 1, probability 0, space 0, times 0 15:33:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0xfe80ffff}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) [ 2574.848617][T29538] CPU: 1 PID: 29538 Comm: syz-executor.2 Not tainted 5.15.0-rc2-syzkaller #0 [ 2574.857399][T29538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2574.867634][T29538] Call Trace: [ 2574.870909][T29538] dump_stack_lvl+0xd6/0x122 [ 2574.875680][T29538] dump_stack+0x11/0x1b [ 2574.880034][T29538] should_fail+0x23c/0x250 [ 2574.884537][T29538] should_fail_usercopy+0x16/0x20 [ 2574.889567][T29538] _copy_to_user+0x1c/0x90 [ 2574.893992][T29538] simple_read_from_buffer+0xab/0x120 [ 2574.899362][T29538] proc_fail_nth_read+0x10d/0x150 [ 2574.904390][T29538] ? proc_fault_inject_write+0x230/0x230 [ 2574.910059][T29538] vfs_read+0x1e6/0x750 [ 2574.914294][T29538] ? __fget_light+0x21b/0x260 [ 2574.918982][T29538] ? __cond_resched+0x11/0x40 [ 2574.923687][T29538] ksys_read+0xd9/0x190 [ 2574.927882][T29538] __x64_sys_read+0x3e/0x50 [ 2574.932388][T29538] do_syscall_64+0x44/0xa0 [ 2574.932795][T29541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4627 sclass=netlink_route_socket pid=29541 comm=syz-executor.0 [ 2574.936809][T29538] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2574.956054][T29538] RIP: 0033:0x7f4e2a05048c [ 2574.960528][T29538] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2574.980536][T29538] RSP: 002b:00007f4e27e15170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2574.988954][T29538] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f4e2a05048c [ 2574.997115][T29538] RDX: 000000000000000f RSI: 00007f4e27e151e0 RDI: 0000000000000008 [ 2575.007179][T29538] RBP: 00007f4e27e151d0 R08: 0000000000000000 R09: 0000000000000000 [ 2575.015611][T29538] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000001 [ 2575.023655][T29538] R13: 00007ffca717a16f R14: 00007f4e27e15300 R15: 0000000000022000 15:33:01 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024", 0x21}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x100000) 15:33:01 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x7b010000, 0x0, 0x0) 15:33:01 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xfb01, 0x0, 0x0) 15:33:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001316034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 15:33:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0xfec0ffff}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:01 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) 15:33:01 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x2, r3, &(0x7f0000000080)) 15:33:01 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x7c000000, 0x0, 0x0) 15:33:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0xff000000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:01 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xfc00, 0x0, 0x0) 15:33:01 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x7c010000, 0x0, 0x0) 15:33:01 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r3, &(0x7f0000000080)) [ 2575.659243][T29583] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2575.734992][T29597] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5651 sclass=netlink_route_socket pid=29597 comm=syz-executor.0 [ 2575.752122][T29597] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5651 sclass=netlink_route_socket pid=29597 comm=syz-executor.0 [ 2575.752146][T29583] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 15:33:02 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024", 0x21}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x300000) 15:33:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0xffff0000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:02 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xfc01, 0x0, 0x0) 15:33:02 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x10048, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',loose,cache=none,uid=', @ANYRESDEC=0x0, @ANYBLOB=',smackfshat=,hash,fsmagic=0x0000000000000005,fowner=', @ANYRESDEC=0xee00, @ANYBLOB="2c666f776e65723d9cf3f02d71af2a29c225fc174e2d54820668d9a341df873315e631e8f5750119e99b4ffbe3abe2f035291f62b97534dec3e52d4d690bcb55dd01d4f5b17a3bf1dd32b0e4b044be890888595574ff9c021e67d13ffd995d66835f2c082902215b9fedbbf25b8a669183298f2ec056dcb36fc7887f70d117e4f6268823e370ec0d2be58e8046b0", @ANYRESDEC=r4, @ANYBLOB=',dont_appraise,fscontext=unconfined_u,appraise,\x00']) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r5, &(0x7f0000000080)) 15:33:02 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x7d000000, 0x0, 0x0) 15:33:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001317034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 15:33:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0xffff80fe}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) [ 2576.450367][T29614] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2576.460287][T29614] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 15:33:02 executing program 2: r0 = epoll_create(0x9) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r1, 0x400, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000100)={0x10}) r2 = perf_event_open(&(0x7f000001d000)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xec8}, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, r1, 0x2) r3 = signalfd4(r0, &(0x7f0000000140)={[0x2]}, 0x8, 0x800) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000180)={0x2f, 0xffff00, 0x0, 'queue0\x00', 0x3}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000040)) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r5, &(0x7f0000000080)) 15:33:02 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xfd00, 0x0, 0x0) 15:33:02 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x7d010000, 0x0, 0x0) 15:33:02 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfff, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100, 0x200000000, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000100), 0xffffffffffff4af6, 0x30481) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/icmp\x00') epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, 0x0) fcntl$notify(r0, 0x402, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000040)) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r5, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r3, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000200)={0x274, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x5, 0x2c}}}}, [@NL80211_ATTR_NAN_FUNC={0x15c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0x2b, 0xb, "e1e81babf50e33f6f3e8145aa12837b1b70f3c96a5be9379a5b13bc5aee4d88dca271d62c5e2be"}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0xeb}, @NL80211_NAN_FUNC_SRF={0xc, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_INCLUDE={0x4}]}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x118, 0xe, 0x0, 0x1, [{0x4d, 0x0, "4b287590ff26c42d128ee4029952fb026ee1ead1cf6469d9080b9040afb910bc5a843d27b106b97378b80107ac238f633c9f8465195596aa4702cbfbfabb2b7749712093e83bfe54c8"}, {0x30, 0x0, "53e2ed116bc92fd2f33cb0ff2d27bd3c15d2bd72766e83d3764583339c37f4a6e30f5302acf00361c4aea858"}, {0x2b, 0x0, "37aa955c6733a02d9cbf7cc86046171c2a45fb9f45326c9cf6b6c51a1bd9c7fcafbe59100fae7d"}, {0x68, 0x0, "feb41be371a18f40207d33bb51b6345d90e8e763c53883f942d60598495f8b76341e29bd9c0f69bdce40e67ae3f71f05544dfa18bdc87af3abfd1527c55cfd032fc122c934163a3004e2d3bc0e147160a9cd4b65fcd238e1314795226c59d1733dff8a71"}]}]}, @NL80211_ATTR_NAN_FUNC={0x3c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x8}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x5}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x2}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x8}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x24, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x6a}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x1000}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x88, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0xbe}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x48, 0xd, 0x0, 0x1, [{0x43, 0x0, "42b4f071a7b49b4fe00b624c1c0a8f0f141490c833cc4a229c4978c26ee40017c2c73fc677f90f0dd19bc3abb175721568a889229dec8f694c6bafb6a11266"}]}, @NL80211_NAN_FUNC_TERM_REASON={0x5}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "3b83bb37e3ab"}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x20}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x8e2}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x8010}, 0x40804) 15:33:02 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xfd01, 0x0, 0x0) 15:33:03 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024", 0x21}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x400300) 15:33:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0xffffc0fe}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:03 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x7e000000, 0x0, 0x0) 15:33:03 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x7, r4, 0x9) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r5, 0x400, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/ahci', 0x800, 0x80) kcmp$KCMP_EPOLL_TFD(r3, 0xffffffffffffffff, 0x7, r4, &(0x7f00000001c0)={r5, r6, 0x1db}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r7, &(0x7f0000000080)) 15:33:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001318034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 15:33:03 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xfe00, 0x0, 0x0) 15:33:03 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x7e010000, 0x0, 0x0) 15:33:03 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r4, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044ab4ea6f7ae56d88fecf9141a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) fcntl$getflags(r4, 0x401) 15:33:03 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xfe01, 0x0, 0x0) 15:33:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0xfffffdef}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:03 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x7f000000, 0x0, 0x0) 15:33:03 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xff00, 0x0, 0x0) [ 2577.397463][T29702] selinux_netlink_send: 2 callbacks suppressed [ 2577.397476][T29702] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6163 sclass=netlink_route_socket pid=29702 comm=syz-executor.0 [ 2577.467952][T29716] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6163 sclass=netlink_route_socket pid=29716 comm=syz-executor.0 15:33:04 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024", 0x21}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x1000000) 15:33:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0xffffff7f}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:04 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x7f010000, 0x0, 0x0) 15:33:04 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2c9, 0x5}, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, 0x0}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x7, r3, 0x9) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0xff, 0x99, 0x9, 0x1, 0x0, 0x7, 0x1000, 0x6, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7f, 0x4, @perf_config_ext={0x1f, 0x7}, 0x485c0, 0x2, 0x30565d3d, 0x0, 0x3, 0x0, 0x800, 0x0, 0x1, 0x0, 0xfff}, r2, 0xe, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000040)) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r5, &(0x7f0000000080)={0x80000000}) 15:33:04 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xff01, 0x0, 0x0) 15:33:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="39000000131e034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 15:33:04 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_pwait(r3, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], 0x6, 0x7, &(0x7f00000001c0)={[0xc06]}, 0x8) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r4, &(0x7f0000000080)) 15:33:04 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x80010000, 0x0, 0x0) 15:33:04 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r2 = perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x1, 0xf6, 0x20, 0x3f, 0x0, 0x8, 0x40000, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000180)}, 0x4000, 0x8000, 0x3, 0x2, 0x8822, 0xbccd, 0x7, 0x0, 0x2, 0x0, 0x6}, 0xffffffffffffffff, 0x10, r1, 0x4) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup3(r4, r3, 0x0) epoll_pwait(r5, &(0x7f0000000080)=[{}, {}, {}, {}], 0x4, 0x7, &(0x7f0000000140)={[0x4]}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000040)) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r6, &(0x7f0000000100)) 15:33:04 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x20000, 0x0, 0x0) 15:33:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0xffffff97}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:04 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x81000000, 0x0, 0x0) [ 2578.350707][T29777] validate_nla: 2 callbacks suppressed [ 2578.350719][T29777] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2578.365430][T29777] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7699 sclass=netlink_route_socket pid=29777 comm=syz-executor.0 [ 2578.379500][T29777] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2578.379516][T29778] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7699 sclass=netlink_route_socket pid=29778 comm=syz-executor.0 15:33:05 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024", 0x21}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x2000000) 15:33:05 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) 15:33:05 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x40000, 0x0, 0x0) 15:33:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:05 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x81010000, 0x0, 0x0) 15:33:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="39000000135a034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 15:33:05 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) 15:33:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0xfffffff5}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:05 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x82000000, 0x0, 0x0) 15:33:05 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x1000000, 0x0, 0x0) 15:33:05 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x82010000, 0x0, 0x0) 15:33:05 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x1010000, 0x0, 0x0) [ 2579.172846][T29819] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2579.232139][T29830] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23059 sclass=netlink_route_socket pid=29830 comm=syz-executor.0 [ 2579.247159][T29830] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23059 sclass=netlink_route_socket pid=29830 comm=syz-executor.0 [ 2579.255892][T29819] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 15:33:05 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024", 0x21}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x4000000) 15:33:05 executing program 2: r0 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r2, &(0x7f0000000080)) 15:33:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0xffff00000000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:05 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x2000000, 0x0, 0x0) 15:33:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001360034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 15:33:05 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x83000000, 0x0, 0x0) 15:33:05 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x83010000, 0x0, 0x0) 15:33:05 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x2010000, 0x0, 0x0) 15:33:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x4000000000000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:06 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) 15:33:06 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x84000000, 0x0, 0x0) 15:33:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x40030000000000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) [ 2580.117367][T29877] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2580.129325][T29877] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=24595 sclass=netlink_route_socket pid=29877 comm=syz-executor.0 [ 2580.153243][T29877] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2580.154621][T29886] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=24595 sclass=netlink_route_socket pid=29886 comm=syz-executor.0 15:33:06 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024", 0x21}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x7000000) 15:33:06 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x84010000, 0x0, 0x0) 15:33:06 executing program 2: r0 = epoll_create(0x9) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e030a86df875f2e3ff5f163ee340b7679500800000000000000101013c5811039e0c775027ec8e66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5acc326d3a0dffc2c654"}, 0x80) fcntl$setsig(r1, 0xa, 0x32) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000200)={0x2}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x281}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(r0, &(0x7f0000000100), 0x0, 0x4) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x7, r4, 0x9) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x8, 0x1, 0x7, 0x9, 0x0, 0x0, 0x525, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100), 0xc}, 0x1e00, 0x1, 0x2, 0x1, 0x4, 0x7f, 0x5, 0x0, 0xffffffff, 0x0, 0x9}, 0x0, 0xa, r4, 0x8) bind(r1, &(0x7f0000000300)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes-generic))\x00'}, 0x80) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x5, 0x0, 0x94, 0x0, 0x2cb, 0x1209c, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000240), 0x4}, 0x1, 0xfffffffffffffffa, 0xc, 0x2, 0x3, 0x1f, 0x9, 0x0, 0x3, 0x0, 0xfb7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r5, &(0x7f0000000040)) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r6, &(0x7f0000000080)) 15:33:06 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x3000000, 0x0, 0x0) 15:33:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x100000000000000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="3900000013fc034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 15:33:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x200000000000000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:06 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) r4 = syz_open_dev$loop(&(0x7f0000000100), 0xfffffffffffffffb, 0x20800) write$P9_RXATTRWALK(r2, &(0x7f0000000180)={0xf, 0x1f, 0x2, 0x36}, 0xf) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r4, &(0x7f0000000140)={0x4}) 15:33:06 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x3010000, 0x0, 0x0) [ 2580.881237][T29907] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 15:33:06 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x85000000, 0x0, 0x0) 15:33:06 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) [ 2580.924904][T29907] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64531 sclass=netlink_route_socket pid=29907 comm=syz-executor.0 15:33:06 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x4000000, 0x0, 0x0) [ 2580.979149][T29907] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 15:33:07 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = fcntl$dupfd(r2, 0x0, r0) write$P9_RFLUSH(r4, &(0x7f0000000100)={0x7, 0x6d, 0x2}, 0x7) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000040)) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r5, &(0x7f0000000080)) 15:33:07 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024", 0x21}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x9000000) 15:33:07 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x85010000, 0x0, 0x0) 15:33:07 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x4010000, 0x0, 0x0) 15:33:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="3900000013fd034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 15:33:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x300000000000000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:07 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x5000000, 0x0, 0x0) 15:33:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x400000000000000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:07 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7620, 0x0, 0x4, 0x0, 0x1000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREAD(r2, &(0x7f0000000100)={0x100b, 0x75, 0x2, {0x1000, "3bb4a4fb2b7658a9f986b906f1fc151adeec16e439b8772d46a64278c899bce6fe2949103e6143b628b38187e287830d5b6f850dc4c7e39023953d8e796c61594ab0f7a75f6a8cbf42e160af56ffb7412fe68c99353a8fac35c57cbdf347fdc94b15043138bffc23be46e98a8769d2420deabda54c7f7498074dc7836f2b96d3a8dc4701d200188de0690bd01f53517497bdca812c983682ece5bef29cbb7346e14867d59b4f20d5737ed9f01016654cb817cffe56171c4ceb7a4f323d686eb3d4c96edc55c049a7e5ffe6fa040ac36c2887c9b7cdbfc7b859422f3f9d5855c46ede883260777af882b540e36c8430594d32401a59a600ee8728fc6172617cffd3a526ecaf8e94fb52f30e7e4551f5b432381da8fa96d950c020f87b6fab16264c0d6947aa833c58a5872a57eb8ab9bd90ada28ab034afd37ebb76d5c6ac535121e0365d1f01c2b732742071676286b91290d5d26fd1e0ee07fb0709668a317c64434e94148acbcbbb0985b59dacca28c37fb26e0013760dd8ebcf29a259299de2514a8266ccc3ecb240533f1acb89415bff9a1fb1b6ece9f98f6ccd147cd7f1bd8623d1de1be9e6f70adea8eeb638b80a97b3e0528c3193431c1d2f811ff241734c11118b54a17e914b337c036a64ea064cb05a941286c6425475a019e220a26e2c52a9119e81855fd3d2c030efab60af8e089d986f49e09017370f412ca80d000e336b36363c75723500e7ecd92cc6d935f79b840e126cf81fe176d3e1f6f4b1f800d9e6a5cc8b6ccce7f95e372604bdce277f089739158bfb1875e2632bcec0612011a6155e65e472916d06fdfb692349c2491d7acd0c8103c3db37f1c3c16eb78b0148c77ada75c002f9057ba510697a27884c8cb81172fe814e4e5a93c9510d90f0cf43c99ec05972b1b12566850c685e0f49495ce782efcecdac7b24d3f253a7f98a3d752ecb593ec3cdcbbd07d74a20580b6ec81fac74c8d1f0eb7f84ce0ec9eca04faff0da2ca7a4985362002c30f15e91ffeda8cc58cea3a89a3e0cc64d4e825aaca067304e2494f46a57b85f39ae7e4148216d6b1ec66f7ca4358da81763a3edb845bc5f6a074725a6786124d00d8a82528228efc2683d505b8d018f48114c5bcdb5f76cde1ae680964d1f7c7ab0cd98ae5d25ce9b0c8551b4fc94e3450187f7828fbbcacbdf85f913bc7801007b7ab7a703e58de1d403ce82fdcf0e4a3671d8b27520008f81092c2ca6f5fa8c60859721183bfb6d3c72a41ba2f11dd2c1d20b89e45d989c556dd908182476f49840247f17485a372f385e0577876543c67d100c018e5ba261353033353764c82516cb6b2b7d2ad362a54dff48214b26de34e3d6398328312a667eba134304807dc9ff175c88dba95649fec2f0455177b3582a55ec9fe82098e96e31db990c606dff3947969af79c1c3910cc5b143e830a8d9a2b2f197849c6b426b55d3f255cf8b62f1e4c88d87c9a896618e8ecad36e298df23d11373233e6ca8b546934d40a2a55fe194f84ce17f33c8a038bb4cce24c26c1933bdf9a15c3c74fd15ac22ebe299f7406320d202da21b1a221bd86346bb2b0f41c761b8dc9c0dcfa48d70406e5ba80ea1e6d40e20554ea232157eefb65462b63ad8507e3679ba9cb1f5fbf4551ca69449f6f59b11238d004d6d88597053f5583e4fbbaeba43536596e9bd1278ce3f7de1982911f7d9927f3f5a3eef0c96ede4645a03e2dcc6720f30fb19b72af2bc09be8ac81aa8078c11183655194714c0dc8b61ce24d5b076e6447fdadb086fda1863c6e8fb7ed45649305ceecb35af73cae7661f33560e904cdd3335f5fdb15fb624bdb8d401bb79fa53a2b4eef489905df0e27b5802132ddc818141d9f957398cccb9d6c42c6e706e6c10ce09bc2fd520048c5477176739d205998f4fa4d650a8d869edbbf10d8e0a98bbdc4868fd0523cfcc38ada49ffc72a03458d94bfed04331c0b3884cb191c69fbd81f1653418836e28a4c5ac886eb37439dd29ec9fdf489897c201468b94fa55f02a5c0cd484cf9006a3a39370b4b8d7cd8d90012bde6596871dd8eef72b734297de5079964956dff1a121228aac6cde9f02f4f766090f781410e7a9f7183c3e42d845c45bbb5a5f98149d7175980d935fa59e9d596cc241010531285b90ce6ecac40732d9709a2159711f1ec1d789aca6a9612ca2662672ca13456dbaee94cee1e5a3d93bfec35e6730db7a79971b3e93eaccbb847b06168e9d10bc91ff5cd0d6a8cd0f8c0c9846cb4bd042b3419e280ce6d4e9afc45e89a406163aa863ff935981bfe87e7913aa6fee7a274368d3de9b01abc3dbeee9ec4d53f2464af17b016b17c6f2c9e11d546902e77f073ce62fd4818c2bbb2231d2f2e6bcb8d902624f38f6cf76035172846821d7c50ddb6645282ee875ac488af19d36c155ae8ae6c4a030d45b3c3b103cf84ffa64fcc6c000b2d83cbc21a4eb3da3ffc186713cee725d7eb9596a1c43e7c89247515483ca222a473d626aeff541453325b0fe85d57b2ba925f282b19b020cbfcf847bc137b81bed4cd5725762325a6b68f8a13116e3db95a5f81a96ca8086ace00befca1f8fe8a910969545bd4e1681d8d3068aaf5183ad31d18c610667e4b362c1338843dcbbb1b12cd994705f3fc6baa4a90c71eb06d82c845d7abbb498e75c24daf54132c94f7f714824adc15343f025914dcc769379f6256439efcc67a556157417730c5335112e3c56bdd73b3d2f55ef75a906fdde4dbbf0eb36ce276a0e13f2bb180bde78ab95c6bc39dc622422d553187412216097d57ac008573a3aeb5152212b2b2d897cc33b8f6cd0e0808cabf6c3668d92b43d60c4b51303e2799c49e524b1185f876b5938b2b4eba9d9d8d2e64ee9ca5c765401f73a700be4f8c69665b75da2f8cbba51c0f848222fe5aeb6afff03cf867c66e31ed92753d38b9df3951e1fa5e6d08d0c011a0eee916e46d7141bf862682e7d6c41efa54552a4035e7b142dff07224a9b4e4eb2177d25dbce51f1e70e90c2e48aad63c5c9d04ed58c8c22a928947804ceea83fd75d7ee4517036fb433286d28bb600b8314f23ece69bcbc7c506160258a906a506e697851e804c0e859b510349d2ac49d89230b8fe2977dadb5edd2c7fd704f64eac44d94b687f24e618d8e511a0eea56a9caec4b664e26f70f23cd2473c464bc55ab2c812652cd229632f47c46b448e3d5e3d7ff83e8ece33b1f1edff892f68805fa9f32655c5773ea0f1efd7eaaab371d1d71aee6be5c9411e934fbf05a723c1d42b65e75215c7c0dd3cd16e68cd12540621a4a9b7d700fb697c33888880a16db43a5020f3083807d24a039f72854f1c770e8cf9b6aee4e12a99580d85c4730ea888854f1d4409f59a83d14dd4cd940cec73caa479f89ba02ebed9866e20fa62025493786cd931684be3a601f55b5047412b7fa34d122ff9cdc48f3be011d599996db11c4f46c1e000d9331a1fba6d23521dc499570489da40b664d0e319b13dd4fdda028ef1968b48e0a5715682c040dc220627fabc92507a0fd0fa94ebcabb9edbb01ecb40aad8a7929f298ada43113fb0141f53dd5d985cb4412a89d72101f13032ddf0991e3e1195cdac0d3d9c4bf7008b3351064534252baa4c42ae477a9413056f20f227ec572811a76c052d966482e07a0a65c77a98750905265f9b215c0fec6316ee3fd926ad533fd4d9b0df954dfeef733e19beff48ff962a9dd30ab9159bba5ea54a89a98fd977812dc4325e35f1ecaa931e38815528ed5c5850b70a465f35a369359307f42c0b730195379abb33cdc94ed490d654b4671295493a5e2599f1e40c98557cb49a545ada662bc4d9a298cd9225b2522483e8fe0bdbe4f6afd9aab8767573e66fff0fa71f754e41c256a3c5b9831fd2c82d941a965a1dbec173775df600c5d64c9b87fa4d1c1adf8ac24ce99205b0eea9eb492f2fe129a9c5cf946c6262f9ea5ffd14d6d3afb331a92e5c55ca747d1b3d15a5b1048b4890d14bf3b276ec5d0d0b3d4b3ae818e42859ca69528f6219292a6f4eedb7cb88492d9545a7dd8e2aa9e03a7549b49df95fdc072bf2e421f0cb13addd6f3d5a1089887454b4ea7cbab0ef20ea40dd0fa4e1d30406a028e6681df84fde1fa4ee995dc41c44017253fc7553c491ba6fad57d8aef0170da3659f103a7db58b156e4971ebdc26d50255a7dad9f326ec62b2c148ea1e509fc8edc2efd4c22018cde90fb34a29bfdcd687c035237157b69317c757c05352a35316a432bff56e2fa18278a3d43bc27df622cf0379ca22ef6ade9b483e64c0898df0cd8966877b99d0e6b68890a71292ab73068a22c40a039d5333466d5f2699f63da3af4e30e02e881084b10cabbd4deb55bd5dc1af6c277145676a96f846b045c6666ddd05d13605a4b7bfd97795a9fc680aacc953f92930c80b385d4ce8230475eadfeb0ac34c6bb58e2a91b9f8c41022328698c0bb1a0b88511014bbc65afa1fa2e55b3b62998858a3b8e64324f9c7143d912f9fbbe44c3b521b3e3e26a9c9ecec727f58eaf156900a66c51206054d7d8b4d647a528e3cf4049770da5065efc155efda6f1dc4bf6c6cd6e4a57df6e9529652c84c434dddff4744a537d453fb0f09155e10cdb0064a220eb7f6f7bcd8e71e995ecb696fc5d91d34d7a204105186f823b7e0ddb838a53cc1e22f49cc21e26c8124bbe25500fcab902a2974a4b85dc52a0d0bc215de8149e32018179c0f6a2312af5ed700a4d7524708af7077d10b28868b56c902818e0428dd0e563cb00a9db30864001f5320834282256128afad57b4971282290a5972d107f2b94b85fd5f4addffe197fc1fe73859ee0ec3398d3e6f9b3d71c0a55418225c086e3c47582cad22a7764bb26c80fd834f95b35ce13e68007d8d72b0d58480b084e50338f395ccacf4a29f8e50efe66ef104eb263d489ffa41ea8fe94d7d8d0cc48f3be1a9714410c5b0fbd4634e40daeb45a5dc526f8fa1a76ce83b765c0c61ea3946a7f7855ddaefcb3c5d5d23d0ffce039b2177f8591614567ede0f4b0811fe770766f861d216decc3f6bf9ee27df32ce11bae4d1414444d3af3e0faff5b9ea064b2c7892e89b65c1562da6d90a3773bb6bb3b39ce3081d8d79831c7a2682ca2c6699a00ea150ae4534e01dd7428c9d97e32c7e93043b83fdd10509a814e994b80c9bb5387978a215207c3ea0e0302e8caf8828adae7abe2d6aa781d1f3e3163bfa18f6eb001e0765e3050cbeaf1aa2b8b303aec509b3f4dd7cef692c597419f9921b668d07bbfaa6be3bbb0de2cc99a7ea7922d381d770410d551d7a819f66b5150e59c4e160b65bf6183a5d9249d21f8a5a838fcd80725e3853781c3483ffe50dba1ae39f2f5d8cb9248e929b4a88930233936904b6c4e122cd68c3e8e306d35018adc55cd469a29372e2a6bce3616366c8bbe83c4134a38cacd8d0d3cc5c28b76451369a8d8892b0af8653552c8d3d015b368ef1f96915c7a04fb590002e2f9453d14cfbae718c5253a05151c987db7eed91c3c5812d667ed91cdeb971d66ab9c59900b8bf1dd9fdcdb099d33e5e39706a61df46853bb8f4a1c521c0f848cb9b1aac3b5d0c52bed141f9c8d9a2548e0d05417c7656e80ae77109359bbe70df69bda061ce6eb313319d73abaf7fd641a83f721b25193e23b117ad8c15d486e52de8d86db080b8073d2d3c55d36fae29efa34dc9601fd276014a315dba9ab70f66e38631b274f7be11a5d4759f8418b241eef882e31cbcd03c8ea90e421f2f8bcbf5c86015f9"}}, 0x100b) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = dup2(r0, 0xffffffffffffffff) epoll_wait(r4, &(0x7f0000001140)=[{}, {}, {}], 0x3, 0x1000) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) 15:33:07 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x86000000, 0x0, 0x0) 15:33:07 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x5010000, 0x0, 0x0) 15:33:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x500000000000000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:07 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x10000, 0x0, 0x1}, 0x18) vmsplice(r3, &(0x7f0000000700)=[{&(0x7f0000000180)="53be44a965e9fd497bab4691e59b7bcf5833b4b37e4eb78f437a9acc42eebc204ba4cebb27ad13e2cd249b1cea04494bc23956530ce751a49c526b85193a4688944337e3dd5d78ec93c72f5e9fefb88dbc4460366e559687e86eae22afbffe2f38eaaba942e58e4de86885b57b0d09e1785c536a1214a890e4a75274ae7ad12deab87daacea87c003ddec27a0bf89c8bdbdcc61a05eec94937853a66b98ded3eee978ffd0053", 0xa6}, {&(0x7f0000000240)="76f9b511c63d82b985a0fef6c8a007806b602a84ef0b2f9baaa41fbc20ec730f36cfb3955cb9a7dd3dd367077962e5492dc2e773dbe8ac03bb3254e3fed1a8ffccb298624e085b8dc4b3a757fc5f8aa50f47da19aa499b101b14f74c76d43267cc8e437b9e61d2d2e1fc45049c77ee43e4c10e3234500cd087634907509bb23eb407ed1fe33f0eead37f4da8b971d964fa8b1af606e203bc98a40f19a5e70964b92b6952cad419c6f27ca84d3e", 0xad}, {&(0x7f0000000300)="cf7f240064117886050ffc501a91f3933a2d8064a988d8d18d78b8ae836205a3d0726c278543a59fe83cbc28b27577fe98bb8311212680acc0fa26ea41c3a21a7c017392b984b16061c2f302dd5c79caf08d7893f5e2c1ad9cc17ea04d1cb3627fecfa004224f81d709407e17df9527c77", 0x71}, {&(0x7f0000000380)="5865abb3b45de50eb4a2d08fcc060b413e6afcc60cc99f5dd0d978dea292315a30291a86ebad2ce3454b9146bec53f7852bdbbdc0160f8b892fc588c9740beca13c2f45a221d1a002057ad74623e5c6b8731161238b5e13ee52fe0cf088a3433f554056ad452b455537bffc243a4734fbe8ca25e2b62c1c3f71d4b7db2675e92be4aa1effc80c9adb07f2b06f7864376cf7027d70a9ce2914a88b86ab86065bf7b346aac3ab88e4a07aad46d2e076f6f20c9d37ca048a066c2652f2a3fec5c7170d006def53c48a3795712c96a1dd4", 0xcf}, {&(0x7f0000000480)="bac4e4a4d784622e566a49daa0634a4741f6c1973049986544e779133c3792251bab594603642f9a041ce83568080a239c5470dba61b8a0ddef9ceebd8eca0864f63315e2c8e8bb4e0ae52461204ddca46d88d27ce8d261a11fe19084bbe476e17b215e9ae803688f8073f74d605b6d576407c0057c0589a7cc3edc1c4aed6425e9ffe42d93aed9367e34415d3b8242f0e53e5a0bd5aa1ca790d91f0fe0f1ba258c09d2935b227fb7acb", 0xaa}, {&(0x7f0000000540)="c1571a1a6611", 0x6}, {&(0x7f0000000580)="2382c25bc48c8008db595bbc04f3cc4082e3e7f8953a02e1d8a24308d350a17e0939cc9d2bc69299108704f20f83bfdee6bae989751b2752af2eb4a7fcedf159d79bc92ab659e26354738d9e820556ed8a83bbccf4d46f9f927170ad418cf216c121a025ea6eda0574c2cd4605bde84bda8bf97f14fa78e5c06bf7a82411f487c7343ed58e545ced4bafc385912c035891010b77b451fdfa122133105d57496d512dcf5cafc5d8cb888f2aa79a8129aceaa0e5018c919c41a1091bb47394", 0xbe}, {&(0x7f0000000640)="eaeb78f43a74192aaef2e7d483e1d5baaa16f4ed5f901d1381f512fde4508edcbe2233e94f56122320f51b1d85fe8d331aa91ba0c24b2e393628446ec90d7afdb8413891b454597f12f61bc7098a4cba7b0f5a9b835794cbd0b37dd91ef4ec972f574936f1a68a12eeb47cbeb58e86aeea08d4285ff988ee15f2d944c4d91359e57d2d2de86ae6df518ddf09bdb1e97622197c9214eca0aef563891e", 0x9c}], 0x8, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x58, r5, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x58}}, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000900)='.pending_reads\x00', 0x40002, 0x80) perf_event_open(&(0x7f0000000880)={0x5, 0x80, 0x81, 0xec, 0x8, 0x1, 0x0, 0x551, 0x1830, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffa, 0x4, @perf_bp={&(0x7f0000000840)}, 0x0, 0x6, 0xfd90, 0x0, 0x6, 0x2, 0x1ff, 0x0, 0x1, 0x0, 0x8000}, 0xffffffffffffffff, 0xc, r7, 0x2) perf_event_open(0x0, 0x0, 0x7, r6, 0x9) perf_event_open(&(0x7f00000007c0)={0x3, 0x80, 0x80, 0x41, 0xe, 0x4f, 0x0, 0x7, 0x9001b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000780), 0x4}, 0x14a8, 0xffffffff, 0x7, 0x9, 0x2, 0xffffffe0, 0x4, 0x0, 0x7, 0x0, 0x9d6}, 0xffffffffffffffff, 0x9, r6, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r8 = socket$inet(0x2, 0x5, 0x8000) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r8, &(0x7f0000000080)) [ 2581.940409][T29997] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2581.949065][T29997] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64787 sclass=netlink_route_socket pid=29997 comm=syz-executor.0 [ 2581.962772][T29997] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 15:33:08 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024", 0x21}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xf000000) 15:33:08 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x6000000, 0x0, 0x0) 15:33:08 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x86010000, 0x0, 0x0) 15:33:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x600000000000000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:08 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = dup3(r0, 0xffffffffffffffff, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000100)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000040)) r5 = dup3(0xffffffffffffffff, r0, 0x0) r6 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000140)={0x0, r6, 0x2, 0x1, 0x9, 0x66}) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r8, 0xa, r7, &(0x7f00000001c0)={0x10}) 15:33:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300054700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 15:33:08 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) 15:33:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x700000000000000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:08 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000040)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)=0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, @perf_bp={0x0}, 0x10060, 0x0, 0x2c, 0x0, 0x2, 0x0, 0xfffc}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x7, r6, 0x9) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x300010, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="2c63616368653d6d6d61702c63616368653d6c6f6f73652c64656275673d30783030303030302a73e210303030304b301b3020312c6673636f6e746578743d757365725f752c00bb8056546afd551ba439fbf2a29e572b21"]) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r4, &(0x7f0000000080)) 15:33:08 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x87000000, 0x0, 0x0) 15:33:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x800000000000000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:08 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/timer\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r4, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044ab4ea6f7ae56d88fecf9141a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000140)=[r2, r4, r1, r0], 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r5, &(0x7f0000000080)) 15:33:09 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024", 0x21}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x10000000) 15:33:09 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x6010000, 0x0, 0x0) 15:33:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x1008000000000000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:09 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x87010000, 0x0, 0x0) 15:33:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300064700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 15:33:09 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x1a3100, 0x14b) r4 = eventfd(0x80000000) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000200)={0x80000001}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)) epoll_wait(r3, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x1) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r5, &(0x7f0000000080)) 15:33:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x1100000000000000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:09 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x88000000, 0x0, 0x0) 15:33:09 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f00000009c0)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000940)=[{{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/103, 0x67}, {&(0x7f0000000240)=""/72, 0x48}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f0000000300)=""/112, 0x70}], 0x4, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}}, {{&(0x7f00000004c0), 0x6e, &(0x7f0000000840)=[{&(0x7f0000000540)=""/52, 0x34}, {&(0x7f0000000580)=""/105, 0x69}, {&(0x7f0000000600)=""/123, 0x7b}, {&(0x7f0000000680)=""/45, 0x2d}, {&(0x7f00000006c0)=""/170, 0xaa}, {&(0x7f0000000780)=""/8, 0x8}, {&(0x7f00000007c0)=""/116, 0x74}], 0x7, &(0x7f00000008c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}], 0x2, 0x2000, &(0x7f0000000a00)={r3, r4+10000000}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r5, 0xc0096616, &(0x7f0000000a40)={0x4, [0x0, 0x0, 0x0, 0x0]}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f0000000040)) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r7, &(0x7f0000000080)) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x7, r8, 0x9) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r8, &(0x7f0000000100)={0x2000}) 15:33:09 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x7000000, 0x0, 0x0) 15:33:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x2001001000000000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:09 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x88010000, 0x0, 0x0) [ 2583.688312][T30094] validate_nla: 3 callbacks suppressed [ 2583.688325][T30094] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2583.704110][T30094] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 15:33:10 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024", 0x21}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x39000000) 15:33:10 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) 15:33:10 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x7010000, 0x0, 0x0) 15:33:10 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x89000000, 0x0, 0x0) 15:33:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x4000000000000000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300094700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 15:33:10 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x89010000, 0x0, 0x0) 15:33:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x8000000000000000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:10 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) pipe(&(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) 15:33:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x97ffffff00000000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:10 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x8000000, 0x0, 0x0) 15:33:10 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x8010000, 0x0, 0x0) [ 2584.610625][T30141] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2584.619806][T30141] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2584.629369][T30141] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2584.638630][T30146] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 15:33:11 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024", 0x21}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x6b160000) 15:33:11 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x8a000000, 0x0, 0x0) 15:33:11 executing program 2: r0 = epoll_create(0x9) r1 = socket(0x11, 0x800000003, 0x0) epoll_wait(r0, &(0x7f0000000140)=[{}], 0x1, 0x4) bind(r1, &(0x7f0000000280)=@nfc={0x27, 0x1, 0x1, 0x3}, 0x80) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x2002}) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) epoll_pwait(r3, &(0x7f00000001c0)=[{}, {}, {}], 0x3, 0xffff, &(0x7f0000000200)={[0x40]}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000040)) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r5, &(0x7f0000000080)) 15:33:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0xc805000000000000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:11 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x9000000, 0x0, 0x0) 15:33:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="3900000013000a4700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 15:33:11 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x8a010000, 0x0, 0x0) 15:33:11 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x16000, 0x0, 0x0, 0x8}, 0x0, 0x5, 0xffffffffffffffff, 0x8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) 15:33:11 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x9010000, 0x0, 0x0) 15:33:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0xe0ffffff00000000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:11 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x7, r0, 0x9) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000140)={0x0, 0x0, {}, {}, {0x0, @struct}}) r1 = epoll_create(0x9) r2 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000040)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000002880)={0x0, 0xffffffffffffffff, 0xfc, 0x8, @scatter={0x3, 0x0, &(0x7f0000001700)=[{&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/117, 0x75}, {&(0x7f0000001640)=""/133, 0x85}]}, &(0x7f0000001740)="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", &(0x7f0000001840)=""/4096, 0x8, 0x10, 0x1, &(0x7f0000002840)}) tkill(r5, 0x4) epoll_ctl$EPOLL_CTL_MOD(r1, 0xa, r4, &(0x7f0000000080)) 15:33:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0xeffdffff00000000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) [ 2585.461352][T30188] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2585.493720][T30188] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 15:33:12 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024", 0x21}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x9effffff) 15:33:12 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x8b000000, 0x0, 0x0) 15:33:12 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xa000000, 0x0, 0x0) 15:33:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0xf5ffffff00000000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:12 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x3, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x16018, 0xffffffffffffffff, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) 15:33:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="3900000013000b4700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 15:33:12 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x600100, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000140)={0x10}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000040)) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r5, &(0x7f0000000080)) 15:33:12 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x8b010000, 0x0, 0x0) 15:33:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0xf7ffff7f00000000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:12 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xa010000, 0x0, 0x0) 15:33:12 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) r2 = signalfd4(r1, &(0x7f0000000100), 0x8, 0x80000) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000140)={0x80000002}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000040)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0xa, r4, &(0x7f0000000080)={0x40000018}) 15:33:12 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x8c000000, 0x0, 0x0) [ 2586.364487][T30245] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2586.373483][T30245] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 15:33:13 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024", 0x21}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xb40f0000) 15:33:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0xfc00000000000000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:13 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xb000000, 0x0, 0x0) 15:33:13 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000100)={0x4}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x7, r4, 0x9) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e030a86df875f2e3ff5f163ee340b7679500800000000000000101013c5811039e0c775027ec8e66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5acc326d3a0dffc2c654"}, 0x80) ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000000140)={0x8, 0x400, 0xaa3}) 15:33:13 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x8c010000, 0x0, 0x0) 15:33:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="3900000013000c4700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 15:33:13 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x8d000000, 0x0, 0x0) 15:33:13 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e030a86df875f2e3ff5f163ee340b7679500800000000000000101013c5811039e0c775027ec8e66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5acc326d3a0dffc2c654"}, 0x80) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000100)={0x6, 0x3, 0xffffffc9}, 0xc) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) r1 = epoll_create(0x9) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x3, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044ab4ea6f7ae56d88fecf9141a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in=@multicast1, @in=@broadcast, 0x4e22, 0x0, 0x4e22, 0x200, 0x2, 0xa0, 0xa0, 0x0, 0x0, 0xee01}, {0x788, 0x1, 0x6, 0xfb3, 0xff, 0x1000, 0x0, 0x20}, {0x1, 0x7f76, 0x9, 0x40}, 0x9, 0x6e6bb5, 0x0, 0x1, 0x1}, {{@in6=@remote, 0x4d2, 0x6c}, 0x2, @in=@private=0xa010100, 0x3504, 0x3, 0x2, 0x0, 0x4ec9aa62, 0x3f, 0x1f}}, 0xe8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000040)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0xa, r4, &(0x7f0000000080)) 15:33:13 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x8d010000, 0x0, 0x0) 15:33:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0xfe80000000000000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:13 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xb010000, 0x0, 0x0) 15:33:13 executing program 2: r0 = epoll_create(0x9) epoll_create1(0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x2}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000040)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r4, &(0x7f0000000080)) r5 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x2, 0x177) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x7, r6, 0x9) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e030a86df875f2e3ff5f163ee340b7679500800000000000000101013c5811039e0c775027ec8e66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5acc326d3a0dffc2c654"}, 0x80) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x200002, 0x0) poll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x20}, {r0, 0x8}, {r5, 0x1000}, {r6, 0xa}, {r7, 0xc202}, {r8, 0x441}, {r1, 0x8140}, {r2, 0x82}], 0x8, 0xffff) 15:33:13 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024", 0x21}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xc00e0000) 15:33:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0xfe80ffff00000000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:13 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x8e000000, 0x0, 0x0) 15:33:13 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x130d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000000100)={{r2}, "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"}) fcntl$setlease(r2, 0x400, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x60002004}) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x0) io_uring_enter(r3, 0x3a68, 0xaec9, 0x2, &(0x7f0000001100)={[0x3]}, 0x8) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r5, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r4) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r6, &(0x7f0000000080)) 15:33:13 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xc000000, 0x0, 0x0) 15:33:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="3900000013000e4700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 15:33:13 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x8e010000, 0x0, 0x0) 15:33:13 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000040)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) dup(r2) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r5, 0x400, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x2000}) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r4, &(0x7f0000000080)) 15:33:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0xfec0ffff00000000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:14 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xc010000, 0x0, 0x0) 15:33:14 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x8f000000, 0x0, 0x0) 15:33:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0xff00000000000000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:14 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024", 0x21}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xeaffffff) 15:33:14 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) r4 = syz_open_dev$vcsa(&(0x7f0000000100), 0x8, 0x200) epoll_wait(r4, &(0x7f0000000140)=[{}], 0x1, 0x5) 15:33:14 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xd000000, 0x0, 0x0) 15:33:14 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x8f010000, 0x0, 0x0) 15:33:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300114700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 15:33:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0xffffff7f00000000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:14 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x90000000, 0x0, 0x0) 15:33:14 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cgroups\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000001c0)={0x9000000b}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r5, 0x400, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000200)={0xc}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000040)) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r6, &(0x7f0000000080)) r7 = open(&(0x7f0000000100)='./file0\x00', 0x200, 0x24c) write$P9_RVERSION(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="131f00007efffff4000000069b990890741cc34a003928883be630"], 0x13) 15:33:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0xffffffff00000000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:14 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xd010000, 0x0, 0x0) 15:33:14 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x7ff, 0x0, &(0x7f0000000240), 0x14400, &(0x7f0000000280)=ANY=[@ANYBLOB="68d2fc68e60d2393ef722c7569653d", @ANYRESHEX=0xee00, @ANYBLOB=',nr_blocks=87%-e12,huge=never,euid>', @ANYRESDEC=0xee01, @ANYBLOB=',seclabel,euid=', @ANYRESDEC=0xee00, @ANYBLOB=',\x00']) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r4, 0xf50f, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) 15:33:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) [ 2588.976786][T30385] loop2: detected capacity change from 0 to 3 [ 2589.004224][T30385] tmpfs: Unknown parameter 'hÒühæ#“ïr' [ 2589.033977][T30393] validate_nla: 6 callbacks suppressed [ 2589.033991][T30393] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2589.056074][T30385] loop2: detected capacity change from 0 to 3 [ 2589.070744][T30393] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2589.080486][T30393] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2589.089862][T30405] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 15:33:15 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024", 0x21}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xefffffff) 15:33:15 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x90010000, 0x0, 0x0) 15:33:15 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xe000000, 0x0, 0x0) 15:33:15 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x2002, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x9, 0x3}, 0x200, 0xfffffffffffffffe, 0x6, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x9) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r5, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044ab4ea6f7ae56d88fecf9141a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000240)={0x8}) 15:33:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300024700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 15:33:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x2}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:15 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xe010000, 0x0, 0x0) 15:33:15 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x91000000, 0x0, 0x0) 15:33:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x3}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:15 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x91010000, 0x0, 0x0) 15:33:15 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xf000000, 0x0, 0x0) [ 2589.950320][T30461] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2589.960706][T30461] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 15:33:16 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024", 0x21}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xf0ffffff) 15:33:16 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x14100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) epoll_wait(0xffffffffffffffff, &(0x7f0000000100)=[{}, {}, {}, {}], 0x4, 0x2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) 15:33:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x5}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:16 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xf010000, 0x0, 0x0) 15:33:16 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x92000000, 0x0, 0x0) 15:33:16 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300044700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 15:33:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x6}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:16 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x92010000, 0x0, 0x0) 15:33:16 executing program 2: r0 = epoll_create(0x9) epoll_wait(r0, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0xffffffff) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = syz_open_dev$sg(&(0x7f0000000100), 0x10001, 0x10002) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r3, &(0x7f0000000140)={0x20000000}) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x7, r4, 0x3) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000180)={0xa0000000}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r5, &(0x7f0000000080)) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) fsetxattr$security_evm(r6, &(0x7f0000000280), &(0x7f00000002c0)=@ng={0x4, 0xe, '.EI'}, 0x5, 0x2) 15:33:16 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x10000000, 0x0, 0x0) 15:33:16 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x93000000, 0x0, 0x0) 15:33:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) [ 2590.680465][T30491] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2590.692115][T30491] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 15:33:17 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024", 0x21}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xfeffffff) 15:33:17 executing program 2: rt_sigsuspend(&(0x7f0000000100)={[0x8]}, 0x8) r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) 15:33:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x8}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:17 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x10010000, 0x0, 0x0) 15:33:17 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x93010000, 0x0, 0x0) 15:33:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300054700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 15:33:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x11}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:17 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x94000000, 0x0, 0x0) 15:33:17 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x11000000, 0x0, 0x0) 15:33:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xfc}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:17 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x94010000, 0x0, 0x0) 15:33:17 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x11010000, 0x0, 0x0) [ 2591.607190][T30564] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2591.628749][T30564] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 15:33:18 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024", 0x21}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xffffff9e) 15:33:18 executing program 2: r0 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000180)={0x7000000d}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_setup(0x7fe5, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000140)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x1}, 0x7fff) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) 15:33:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x300}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:18 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x95000000, 0x0, 0x0) 15:33:18 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x12000000, 0x0, 0x0) 15:33:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300064700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 15:33:18 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x95010000, 0x0, 0x0) 15:33:18 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x12010000, 0x0, 0x0) 15:33:18 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000040)=0x75, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @private=0xa010100}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044ab4ea6f7ae56d88fecf9141a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e030a86df875f2e3ff5f163ee340b7679500800000000000000101013c5811039e0c775027ec8e66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5acc326d3a0dffc2c654"}, 0x80) dup3(0xffffffffffffffff, r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000040)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x603, 0x9, 0xd4, 0xdedd}, {0x8, 0x40, 0x40, 0xffff}]}, 0x10) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r4, &(0x7f0000000080)) 15:33:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x500}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:18 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x13000000, 0x0, 0x0) 15:33:18 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30604, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c, 0x3}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x900) r3 = epoll_create(0x1) r4 = socket$inet6(0xa, 0xa, 0xfffffe17) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000140)={0x20000004}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r5, &(0x7f0000000080)) 15:33:19 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024", 0x21}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xffffffea) 15:33:19 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x96000000, 0x0, 0x0) 15:33:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x5c8}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:19 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0x9, 0x7ff, 0x6}) write$P9_RWRITE(r3, &(0x7f0000000140)={0xb, 0x77, 0x2, 0x4}, 0xb) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r4, &(0x7f0000000080)) 15:33:19 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x13010000, 0x0, 0x0) 15:33:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300084700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 15:33:19 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000100)={0x16}) 15:33:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x600}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:19 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x96010000, 0x0, 0x0) 15:33:19 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x14000000, 0x0, 0x0) 15:33:19 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x97000000, 0x0, 0x0) 15:33:19 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2, 0xffffffff}, 0x0, 0x0, 0x0, 0x0, 0x844}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000001c0)={0x0, 0x0}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x7, r3, 0x9) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x87, 0x20, 0x1b, 0x1c, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x4, @perf_bp={&(0x7f0000000100), 0x1}, 0x9903, 0x3, 0x2, 0x5, 0x10000, 0x7, 0x4, 0x0, 0xffffffff, 0x0, 0x3ff}, r2, 0xb, r3, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000040)) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r5, &(0x7f0000000080)) 15:33:20 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024", 0x21}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xffffffef) 15:33:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:20 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x97010000, 0x0, 0x0) 15:33:20 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x14010000, 0x0, 0x0) 15:33:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300094700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 15:33:20 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) clone3(&(0x7f00000003c0)={0x82800, &(0x7f0000000100)=0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180), {0x1d}, &(0x7f00000001c0)=""/183, 0xb7, &(0x7f0000000280)=""/194, &(0x7f0000000380)=[0xffffffffffffffff], 0x1}, 0x58) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, &(0x7f0000000440)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r4, &(0x7f0000000080)) 15:33:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x810}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:20 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x98000000, 0x0, 0x0) 15:33:20 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000040)) write$P9_RREADDIR(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x68) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_none}, {@version_9p2000}, {@version_9p2000}, {@fscache}, {@access_client}, {@aname}], [{@seclabel}]}}) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r5, 0x400, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000100)={0x90000010}) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r4, &(0x7f0000000080)) 15:33:20 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x15000000, 0x0, 0x0) 15:33:20 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x98010000, 0x0, 0x0) 15:33:20 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x15010000, 0x0, 0x0) [ 2594.339349][T30730] validate_nla: 6 callbacks suppressed [ 2594.339362][T30730] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2594.353915][T30730] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2594.363575][T30730] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2594.372588][T30736] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 15:33:20 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x99000000, 0x0, 0x0) 15:33:20 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024", 0x21}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xfffffff0) 15:33:20 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x16000000, 0x0, 0x0) 15:33:20 executing program 2: r0 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_mount_image$nfs4(&(0x7f0000001ac0), &(0x7f0000001b00)='./file0\x00', 0x3f, 0x9, &(0x7f0000002180)=[{&(0x7f0000001b40)="4266dddfd0b0713a2b71c2fb2ea415f3584a3cf4fc2db753071ed01628060b554596232fc5fb2a9bef5376c37a40f5f0c893fcc5de1bfb2e53e429f6427898e198d06e7c8f255e3a7c7e612b614f6cffe6874716b1a844d52a7ca29496a3a9f8fef1261195c09983474535ad0ac5a8f2ffbd252839a8d5e3db23f6653dad640ef0672d5b1701feb4008d09924890b2509c8993efa4f1269c1c56722eeaeabc71ee880e2a02489ca24ad888071266c7e35a7e19cec24d47dbc7fcce78dbedc50346eb7299db694104cf3f32f5", 0xcc, 0x7}, {&(0x7f0000001c40)="df0b34beae5e84d68dbb8fdc6f4cae622a7e3e88251627faded6e8fdcb", 0x1d, 0xffffffffffffff94}, {&(0x7f0000001c80)="9377e34feaf0c0227fddb310a1c4db17e32202e5a4c0275d0dd26c8db597a9ef5fe4ae7dbc304e0f942a7ab759d90bff190536ed549f47bd8ebf1b9f7c97c4b1d5534fac083c006d75f42d436979e0d79017d271030e70b07e39861b38ea2c051ce73b664702edc8dda68738b639fd2ed7bd64658727b39109a8b6db6960a84f760ab930acbfc5f2cc5e46fa4c091d10f040a31847cedd15", 0x98, 0x3}, {&(0x7f0000001d40)="629433644e1a0d713b00c7042e1a6f1a2dbe63af5a90b83c61731057ac1f2b16962ebfff650d4081830a483aa7e99afcb759e640514050cc0fd8d2fcbb0248c66ee46d439e9f101064f5cab5ba52a8af7fdcec509eb678f659c41e3d", 0x5c, 0x2}, {&(0x7f0000001dc0)="c2b171a1a69da74e22b4f755b90f82957b9ddc5208bd883bfc024c6c770043b932ec2dc145011ee1a63646f21456b90548f7c4e0840306d8f0f3e2cb4af1cb62ba02593e29e15bab8d4d8980ab4a968cf7d11c4b6625417de80d8d421cc822d0f2373e46754d8f4fe9f756645cee014a8b505a9f4d29bddad33e8bbd58cd4400c370baccbdd6c1cfa4e07659b41e13f14baf217453c1b8ab7a41289fed460632b93bf9df9e4b91af5c5e12f1fdbe8df582d14e00", 0xb4, 0x8}, {&(0x7f0000001e80)="44ecbcc2", 0x4, 0xdd2b}, {&(0x7f0000001ec0)="2f66704b443984a7570cfea6ab43f0108ac4bef21d9794a45f31b8f96aefd3fb6f03d6cf002dfef5ee3b99a35399bbdb576efe21aec6d60c0fa4010584c667d9beb2c9020ded1b8995cb20c06b699c6990bf5187885e8240a0233e7b5764a43d071cacaaf6d8626bb7d87b62e12a1665e5a477ebe374952566118fe62d84167818f8f244d0a24bb8cd7353ae16c48023a4a5193ec179dce1c2dc6ee602f58e8ad16859ffeb24b696f865a48320fcdc9f8fff54bbd2afc74780a8aee25438912d1897bc72d37aed180f02894c95dd6e21783a0a8972629d54eb21e2c8b6e5efe3ba08767e5ed9a4bc4a6a8f1d8518cb9549", 0xf1, 0x6}, {&(0x7f0000001fc0)="d33bc9735ed9ea26820173c37a26b98e7f0621b40b29e53b52d8b5e756fd6931671dffcb05f13d3c19a8d4ae33c0b0db733d47d8316ac7487acc656b02657c19035f76996b58c8d64b719cbd855e2067c54b057516db728604d448f8c20c5228ca164f2a08a61185048c76ab6ec8afc3916d32174e531fa786cd8a90183977017bc83c712c96e5690d942353d734134b9e5d6b53056a9f7d6a92fecdf99353bd5a7410fafd387878785db49cd43d17b834ca9af622fff7daf749689db81d11e4573d67c265c6322292a3", 0xca, 0x101}, {&(0x7f00000020c0)="b5ba442b73f8628988d48e7d465739e3e5f7232af8a22385a1156933b9a0524624469ef27c25d6d1994f5010e202c0b81f6c6f1021faa52df7633119b6692164864d321776e4dbcfb7c33e97745a3ddce283b00a5c9406f6c8d8a2ad8ba5badeb7767f3365db07efdbe1ecfca9ba1189d9888ec8d939778bf3608536ca199918c84bdca1cd1b372e5e118cb674f670ae787ee7cda2ec75208c3146b4aa34c8bcfb6ef8b69b4ac37f9343026d", 0xac, 0x5}], 0x92, &(0x7f0000002280)={[{':\x00'}, {'..,^,['}], [{@uid_lt}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@hash}, {@euid_lt={'euid<', 0xee01}}]}) ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) write$P9_RMKNOD(r1, &(0x7f0000000100)={0x14, 0x13, 0x2, {0x40, 0x2, 0x5}}, 0x14) 15:33:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x1008}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="3900000013000a4700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 15:33:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x1100}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:21 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x16010000, 0x0, 0x0) [ 2595.022061][T30741] loop2: detected capacity change from 0 to 16383 [ 2595.042838][T30741] nfs4: Unknown parameter ':' 15:33:21 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x99010000, 0x0, 0x0) 15:33:21 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x17000000, 0x0, 0x0) [ 2595.097446][T30759] loop2: detected capacity change from 0 to 16383 [ 2595.123189][T30759] nfs4: Unknown parameter ':' 15:33:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x4000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:21 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x7fe5, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0x80000000}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d6000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000000)=0x1000307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000400)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x14, 0x1}, 0x1) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r6, &(0x7f0000000040)) r7 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r7, 0x400, 0x0) r8 = accept$unix(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000200)=0x6e) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x10, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@msize={'msize', 0x3d, 0x3}}, {@access_user}, {@aname={'aname', 0x3d, '/!['}}, {@cache_mmap}], [{@euid_lt={'euid<', 0xffffffffffffffff}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '$\\,'}}]}}) setxattr$incfs_metadata(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)="71fbcabd647d752b8ab6253022764d301daac7d479c4322d6da08d48049a542476a3a5e09304e5fb8b85d316f505e44c3861c998fda12e1eda31b634977aa14ad61ee9a7821063bc3f9e3384ff49d88c33", 0x51, 0x3) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r9, &(0x7f0000000080)) 15:33:21 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x9a000000, 0x0, 0x0) [ 2595.322117][T30794] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2595.332716][T30794] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 15:33:21 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024", 0x21}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xfffffffe) 15:33:21 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x17010000, 0x0, 0x0) 15:33:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x80fe}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:21 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x9a010000, 0x0, 0x0) 15:33:21 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) 15:33:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="3900000013000b4700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 15:33:21 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x9b000000, 0x0, 0x0) 15:33:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xc805}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:21 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x18000000, 0x0, 0x0) 15:33:22 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x9b010000, 0x0, 0x0) 15:33:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xfc00}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:22 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x18010000, 0x0, 0x0) [ 2596.172196][T30848] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2596.180807][T30848] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2596.191133][T30848] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2596.200298][T30849] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 15:33:22 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024", 0x21}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x10000000000000) 15:33:22 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x9c000000, 0x0, 0x0) 15:33:22 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x19000000, 0x0, 0x0) 15:33:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xfe80}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="3900000013000c4700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 15:33:22 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x19010000, 0x0, 0x0) 15:33:22 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa507, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x1000}, 0x1000, 0x7fff, 0x10000, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r7}, {}, {r6}, {r6}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {0x0, r7}, {}, {r5, r7}, {0x0, r7}, {}, {}, {}, {0x0, r7}, {r6}, {0x0, r7}, {0x0, r7}, {r6}, {0x0, r7}, {}, {}, {r5}, {0x0, r7}, {}, {}, {r5, r7}, {}, {}, {0x0, r7}, {0x0, r7}, {}, {r5, r7}, {}, {}, {r6}, {}, {0x0, r7}, {r6}, {}, {r6}, {0x0, r7}, {}, {r5, r7}, {0x0, r7}, {r5}, {}, {r6}, {r5}, {}, {r6, r7}, {}, {0x0, r7}, {0x0, r7}, {}, {0x0, r7}, {r6, r7}, {}, {0x0, r7}, {0x0, r7}, {r6}, {r5, r7}, {r5}, {r5}, {}, {}, {}, {}, {r6}, {r5}, {0x0, r7}, {}, {}, {0x0, r7}, {r6}, {}, {}, {0x0, r7}, {r5}, {}, {}, {r6, r7}, {r5}, {}, {}, {0x0, r7}, {}, {}, {0x0, r7}, {}, {}, {r5, r7}, {}, {r5}, {0x0, r7}, {0x0, r7}, {0x0, r7}, {0x0, r7}, {}, {}, {}, {}, {}, {0x0, r7}, {r5, r7}, {}, {0x0, r7}, {r5}, {r6}, {}, {0x0, r7}, {r5}, {r6, r7}, {}, {r5}, {r5, r7}, {}, {}, {}, {}, {0x0, r7}, {0x0, r7}, {}, {}, {r5, r7}, {0x0, r7}, {0x0, r7}, {r5, r7}, {r6, r7}, {0x0, r7}, {}, {r6, r7}, {r6}, {}, {0x0, r7}, {r5}, {}, {r6}, {}, {}, {}, {0x0, r7}, {}, {}, {0x0, r7}, {r6}, {0x0, r7}, {r6}, {r5}, {}, {}, {}, {0x0, r7}, {r5, r7}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {r5}, {r5}, {0x0, r7}, {r5, r7}, {0x0, r7}, {}, {}, {}, {}, {0x0, r7}, {r6}, {0x0, r7}, {0x0, r7}, {0x0, r7}, {}, {}, {}, {0x0, r7}, {r6}, {r5}, {}, {r5}, {}, {}, {}, {0x0, r7}, {r6, r7}, {0x0, r7}, {}, {r6, r7}, {0x0, r7}, {}, {r6, r7}, {}, {}, {r5}, {}, {r5}, {}, {}, {r5, r7}, {}, {}, {0x0, r7}, {r6}, {0x0, r7}, {r5}, {r6}, {}, {}, {}, {r6}, {0x0, r7}, {}, {r5}, {r5, 0x0}, {}, {0x0, r7}, {0x0, r7}, {0x0, r7}, {0x0, r7}, {}, {0x0, r7}, {}, {r6, r7}, {r5, r7}, {r6, r7}, {}, {r5}, {}, {}, {r5}, {}, {}, {r5, r7}, {0x0, r7}, {r6}, {r6}, {r5}, {0x0, r7}, {0x0, r7}, {}, {}, {0x0, r7}, {}, {0x0, r7}, {r5}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000054f40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x4, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000056f40)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r9}, {}, {r10}], 0x0, "6ac352d1b76f87"}) r11 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r11, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r12 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r12, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r15}, {}, {r14}, {r14}, {}, {}, {}, {}, {}, {r14}, {0x0, r15}, {}, {}, {0x0, r15}, {}, {r14, r15}, {0x0, r15}, {}, {}, {}, {0x0, r15}, {r14}, {0x0, r15}, {0x0, r15}, {r14}, {0x0, r15}, {}, {}, {r13}, {0x0, r15}, {}, {}, {r13, r15}, {}, {}, {0x0, r15}, {0x0, r15}, {}, {r13, r15}, {}, {}, {r14}, {}, {0x0, r15}, {r14}, {}, {r14}, {0x0, r15}, {}, {r13, r15}, {0x0, r15}, {r13}, {}, {r14}, {r13}, {}, {r14, r15}, {}, {0x0, r15}, {0x0, r15}, {}, {0x0, r15}, {r14, r15}, {}, {0x0, r15}, {0x0, r15}, {r14}, {r13, r15}, {r13}, {r13}, {}, {}, {}, {}, {r14}, {r13}, {0x0, r15}, {}, {}, {0x0, r15}, {r14}, {}, {}, {0x0, r15}, {r13}, {}, {}, {0x0, r15}, {r13}, {}, {}, {0x0, r15}, {}, {r13}, {0x0, r15}, {}, {}, {r13, r15}, {}, {r13}, {0x0, r15}, {0x0, r15}, {0x0, r15}, {0x0, r15}, {}, {}, {}, {}, {}, {0x0, r15}, {r13, r15}, {}, {r14, r15}, {r13}, {r14}, {}, {0x0, r15}, {r13}, {r14, r15}, {}, {r13}, {r13, r15}, {}, {}, {}, {}, {0x0, r15}, {0x0, r15}, {}, {}, {r13, r15}, {0x0, r15}, {0x0, r15}, {r13, r15}, {r14, r15}, {0x0, r15}, {}, {r14, r15}, {r14}, {}, {0x0, r15}, {r13}, {}, {r14}, {}, {}, {}, {0x0, r15}, {}, {}, {0x0, r15}, {r14}, {0x0, r15}, {r14}, {r13}, {}, {}, {}, {0x0, r15}, {r13, r15}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {r13}, {r13}, {0x0, r15}, {r13, r15}, {0x0, r15}, {}, {}, {}, {}, {0x0, r15}, {r14}, {0x0, r15}, {0x0, r15}, {0x0, r15}, {}, {}, {}, {0x0, r15}, {r14}, {r13}, {}, {r13}, {}, {}, {r14}, {0x0, r15}, {r14, r15}, {0x0, r15}, {}, {r14, r15}, {0x0, r15}, {}, {r14, r15}, {}, {}, {r13}, {}, {r13}, {}, {}, {r13, r15}, {}, {}, {0x0, r15}, {r14}, {0x0, r15}, {r13}, {r14}, {}, {}, {}, {r14}, {0x0, r15}, {}, {r13}, {r13}, {}, {0x0, r15}, {0x0, r15}, {0x0, r15}, {0x0, r15}, {}, {0x0, r15}, {}, {r14, r15}, {r13, r15}, {r14, r15}, {}, {r13}, {}, {}, {}, {}, {}, {r13, r15}, {0x0, r15}, {r14}, {r14}, {r13}, {0x0, r15}, {0x0, r15}, {}, {}, {}, {}, {0x0, r15}, {r13}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000051fc0)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {0x0, r15}], 0x5, "2108ceddb50069"}) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) 15:33:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xff00}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:22 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x9c010000, 0x0, 0x0) [ 2596.922355][ C0] sd 0:0:1:0: tag#5472 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2596.932251][ C0] sd 0:0:1:0: tag#5472 CDB: opcode=0xe5 (vendor) [ 2596.938609][ C0] sd 0:0:1:0: tag#5472 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2596.948013][ C0] sd 0:0:1:0: tag#5472 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2596.957063][ C0] sd 0:0:1:0: tag#5472 CDB[20]: ba 15:33:22 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x9d000000, 0x0, 0x0) 15:33:23 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x1a000000, 0x0, 0x0) 15:33:23 executing program 2: r0 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) r1 = perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9b9, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000040)) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0xaa480, 0x0) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x111000, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x1f) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f0000000280)={0x8, 0x0, &(0x7f0000000240)=[r3, r6, r7, r4, r3, r2]}, 0x6) r8 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r8, &(0x7f00000001c0)={0x30000000}) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r9, &(0x7f0000000080)) [ 2596.971411][ C0] sd 0:0:1:0: tag#5473 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2596.981263][ C0] sd 0:0:1:0: tag#5473 CDB: opcode=0xe5 (vendor) [ 2596.987611][ C0] sd 0:0:1:0: tag#5473 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2596.996829][ C0] sd 0:0:1:0: tag#5473 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2597.005860][ C0] sd 0:0:1:0: tag#5473 CDB[20]: ba 15:33:23 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024", 0x21}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x30000000000000) 15:33:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x34000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:23 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x9d010000, 0x0, 0x0) 15:33:23 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x1a010000, 0x0, 0x0) 15:33:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="3900000013000e4700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 15:33:23 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044ab4ea6f7ae56d88fecf9141a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) fsync(r2) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000040)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r4, &(0x7f0000000100)) 15:33:23 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x9e000000, 0x0, 0x0) 15:33:23 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_bp={0x0}, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0xfffffffe) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) 15:33:23 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x1b000000, 0x0, 0x0) 15:33:23 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x9e010000, 0x0, 0x0) 15:33:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x40000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:23 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r2, 0x400, 0x0) epoll_pwait(r2, &(0x7f0000001240)=[{}, {}, {}], 0x3, 0x401, &(0x7f0000001280)={[0x2000000002]}, 0x8) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000100), 0x800, 0x4000) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpu.stat\x00', 0x0, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x7, r6, 0x9) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f00000001c0)={0x1, 0x0, &(0x7f0000000180)=[r4, r0, r5, r0, r0, r6, r0]}, 0x7) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) write$binfmt_script(r4, &(0x7f0000000200)={'#! ', '', [{0x20, 'cpu.stat\x00'}, {0x20, 'cpu.stat\x00'}, {0x20, 'cpu.stat\x00'}, {0x20, '/dev/sg#\x00'}, {0x20, '*.('}, {0x20, '\x1d({'}, {0x20, 'cpu.stat\x00'}], 0xa, "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"}, 0x103e) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r7, &(0x7f0000000040)) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000001300)={0x59, 0x10001, 0x8001, "68496ffc409ed5c7861f66fc216df9811acf7cc61adaad1a669d208d8a0cfefe9f537d079926a34de6261cb0d79a4f3c60356b1ade85269cf9f9445d1798fc1b197ecb47bcbceffa0b7796cf2c6032ec3a2b745da0dc785f68"}) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r8, &(0x7f0000000080)) 15:33:24 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x9f000000, 0x0, 0x0) 15:33:24 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x1b010000, 0x0, 0x0) 15:33:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x400300}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:24 executing program 2: r0 = epoll_create(0x100049fc) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) 15:33:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300104700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 15:33:24 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024", 0x21}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x40030000000000) 15:33:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:24 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x9f010000, 0x0, 0x0) 15:33:24 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x88440, 0x0) write$P9_RVERSION(r4, &(0x7f0000000140)={0x15, 0x65, 0xffff, 0xb0c, 0x8, '9P2000.u'}, 0x15) 15:33:24 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x1c000000, 0x0, 0x0) 15:33:24 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xa0000000, 0x0, 0x0) 15:33:24 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001740)=[{&(0x7f0000000280)="fcf534d5a5ef9b1f1525b285dd5140e3b5811c690ed4c0f3707f240ca16848d647d4b2394f5451309e086abc345768b214afbf056624f1aa0e0997bab1822bf3e3bea06be936cf69546e01f4f923dd71eb05a22d47201cd7a195cc4c60d3314d21d1e9a32fd70e6a6dba77760ab0d88028cdcb3a85288e45f5a2a735588b5dc870839225d009a35175f77b8ed696213b7e37f2971c75a42a21f13842901b9dcba6c51e1fc43c55775b096bf28923eb573463a2735badda", 0xb7}, {&(0x7f0000000340)="e8b191b587069faa80c29535ea8589302b0e4ace4c06a25acaa708f0cb64faf52d5bc172dc0cbb89dd4eeee8686c742922ba1f0e81", 0x35}, {&(0x7f0000000380)}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="861bf870133719cb1574bdf5c3fda62c3e5a8e447c3f9c468a5cde4fb79d22866fcb6e595a410a37972f5c9301847798ab6db0e9f00e07a25e12927dc3c48801c708339af61c70932b5ecba7e17560e81ef99d6bc8592bb04d6e0b2b6d37079432e0bc11dae62c69", 0x68}, {&(0x7f0000001440)="d2c0926a44bf973d59792db639e61cf24689cae38a8e299c177c862897bffa0732cbf21fc954004bf7282d35d848a68a4404e5e1155ecd9517e92897f210c98ce3027cf36fe689c490eaad6e36b76f240ce829966673cfa675a92618866de006b78fabd39e45dc45e951554c97e888501ba6034b5e8907221bc8cff4d37e5f643a745f54c6ae8afccae43d047650e4642714f578d894699a0d1a551ff200edb90f93903d90ac2a809c499806c579281dcb87924e516bc9594df6add6eb318e1319dac5", 0xc3}, {&(0x7f0000001540)="7304ff037dfdc8ea9a25a95f8fa03af9d25b552a3af340e35c1fb46c", 0x1c}, {&(0x7f0000001580)="bfe6e97d056345fee1adcdda519cbb6dcba5bb18d82047990ad5be4910905e4b56d6796cf5b21b4c942062e71b0ab712a472402b60148f69ff905a8f4c73ec98a46b678af7a0b5dd0a8aef6b9a0739e4ed30fe2d1f454bc4a241d4e9912cb61d85d07f94d5207b9d3878f93c2139452ac0d147e9bba7a6ca069e59d2f84a58c20bd8e8b423eee7", 0x87}, {&(0x7f0000001640)="0ac1e31589a4c90d7289efe67ee4430f8a45a6a590436a5cb6d0dd9603ad8beb6ca70fc6ab2052f10af38f7ca12e08e3d5dd3df89937cc73150590a10b42c13700a080b5df278b0601b9623c365029e6b1aae661c362db27b828dcf45c624826a8de941c841ea8a140fee7adf94f816d9cb50114fbd7c801bbd644151def90415367cf8481a2a2b856fdb51f2f5a729ea290d8f8c8fac759e937577466d1f6e92576e63317ce16c530d3ae00eab37bf0b3646c92a2627f555b303968b7ee7c920d1d53d475b3a1d8065ea76833e13bd532d0e1faf057de8a9cc6874af59933ad6d422098c1e8fe41e25a7b02894707fc4bbacf8b7d05c1fd2ac01672e18de7", 0xff}], 0x9, 0x0, 0x0, 0x44}, 0x20008080) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = gettid() epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000380)={0x20002000}) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x40) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f00000001c0)={0x10000000}) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x40, 0xfc, 0x4, 0x2, 0x0, 0x6, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000100)}, 0x0, 0x9, 0x9, 0x9, 0x7, 0x8, 0x7, 0x0, 0xffffffff, 0x0, 0x800}, r4, 0x4, 0xffffffffffffffff, 0x1a) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) 15:33:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x2000000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:25 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x1c010000, 0x0, 0x0) 15:33:25 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024", 0x21}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x100000000000000) 15:33:25 executing program 2: r0 = epoll_create(0x9) r1 = gettid() tkill(r1, 0x34) r2 = perf_event_open(&(0x7f000001d000)={0x4, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000000c0)) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x0) epoll_wait(r3, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x97) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000100)={0x20000001}) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000040)) r5 = socket$inet(0x2, 0x4000000000000001, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = epoll_create(0xffff) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000200)) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r5, &(0x7f0000000080)) 15:33:25 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xa0010000, 0x0, 0x0) 15:33:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x3000000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300114700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 15:33:25 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e030a86df875f2e3ff5f163ee340b7679500800000000000000101013c5811039e0c775027ec8e66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5acc326d3a0dffc2c654"}, 0x80) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r4, &(0x7f0000000100)={0x80000000}) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) 15:33:25 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xa1000000, 0x0, 0x0) 15:33:25 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x1d000000, 0x0, 0x0) 15:33:25 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0xb2154, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x10001, 0xaf}, 0xd01, 0x400000000, 0x2, 0x4, 0x0, 0x800000}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='hybla\x00', 0xffffff0a) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r5, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044ab4ea6f7ae56d88fecf9141a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f0000000180)={0x8}) write$P9_RLERRORu(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="109a127151e8000000070200034ecf7f462172f50300242c"], 0x10) 15:33:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:25 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xa1010000, 0x0, 0x0) 15:33:25 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x1d010000, 0x0, 0x0) [ 2599.758371][T31038] validate_nla: 6 callbacks suppressed [ 2599.758383][T31038] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2599.772579][T31038] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2599.784274][T31055] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2599.792513][T31038] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 15:33:26 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024", 0x21}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x200000000000000) 15:33:26 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x1e000000, 0x0, 0x0) 15:33:26 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044ab4ea6f7ae56d88fecf9141a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="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", 0x1000}], 0x1) r1 = epoll_create(0x9) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000100)={0x13, 0x65, 0xffff, 0x4, 0x6, '9P2000'}, 0x13) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000040)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0xa, r4, &(0x7f0000000080)) 15:33:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034702bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 15:33:26 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xa2000000, 0x0, 0x0) 15:33:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x5000000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:26 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x1e010000, 0x0, 0x0) 15:33:26 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xa2010000, 0x0, 0x0) 15:33:26 executing program 2: r0 = epoll_create(0x80004) epoll_create1(0x80000) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) 15:33:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x6000000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:26 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x1f000000, 0x0, 0x0) 15:33:26 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xa3000000, 0x0, 0x0) 15:33:26 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x1f010000, 0x0, 0x0) [ 2600.662791][T31110] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2600.671901][T31110] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2600.683142][T31113] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2600.691440][T31110] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 15:33:27 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024", 0x21}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x400000000000000) 15:33:27 executing program 2: r0 = epoll_create(0x9) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000000180)={0x3, 0xffffffffffffff0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, @perf_config_ext={0x10000, 0xffff}, 0x0, 0x2000000, 0x0, 0x2}, r1, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a48, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x7, r5, 0x9) r6 = getuid() r7 = getuid() mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x884, &(0x7f0000000280)=ANY=[@ANYBLOB="906e6fe3ff000000", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',version=9p2000,privport,uid<', @ANYRESDEC=r6, @ANYBLOB=',uid=', @ANYRESDEC=r7, @ANYBLOB=',subj_user=-..@):+(&!,obj_role=+,euid<', @ANYRESDEC=0xee01, @ANYBLOB=',uid=', @ANYRESDEC=0xee01, @ANYBLOB=',\b']) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000040)={0x2000}) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_mreqsrc(r8, 0x0, 0x28, &(0x7f0000000100)={@initdev, @empty, @multicast1}, &(0x7f0000000140)=0xc) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r8, &(0x7f0000000080)) 15:33:27 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xa3010000, 0x0, 0x0) 15:33:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:27 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x20000000, 0x0, 0x0) 15:33:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034703bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 15:33:27 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xa4000000, 0x0, 0x0) 15:33:27 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x20010000, 0x0, 0x0) 15:33:27 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r4, 0x400, 0x0) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000140)={0x80000006}) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) 15:33:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:27 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80000000, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r2, &(0x7f00000001c0)={0xa0000000}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$RTC_WKALM_SET(r5, 0x4028700f, &(0x7f0000000140)={0x1, 0x1, {0xb, 0x1f, 0x0, 0x12, 0xb, 0x0, 0x0, 0x129, 0xffffffffffffffff}}) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) 15:33:27 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xa4010000, 0x0, 0x0) [ 2601.530408][T31162] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2601.538920][T31162] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 15:33:28 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024", 0x21}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x700000000000000) 15:33:28 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xa5000000, 0x0, 0x0) 15:33:28 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x21000000, 0x0, 0x0) 15:33:28 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000100)={0x2}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r4, &(0x7f0000000080)) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r5, 0x400, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r2, &(0x7f0000000140)={0x8}) 15:33:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x10000120}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034704bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 15:33:28 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x21010000, 0x0, 0x0) 15:33:28 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) 15:33:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x10080000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:28 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xa5010000, 0x0, 0x0) 15:33:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x11000000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:28 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x22000000, 0x0, 0x0) 15:33:29 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024", 0x21}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x900000000000000) 15:33:29 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) 15:33:29 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xa6000000, 0x0, 0x0) 15:33:29 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x22010000, 0x0, 0x0) 15:33:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x20010010}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034705bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 15:33:29 executing program 2: r0 = epoll_create(0x9) r1 = accept(0xffffffffffffffff, &(0x7f0000000240)=@pptp={0x18, 0x2, {0x0, @dev}}, &(0x7f00000002c0)=0x80) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000300)={0x10000001}) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000000c0)) r3 = syz_io_uring_setup(0x4801, &(0x7f0000000100)={0x0, 0xf114, 0x4, 0x1, 0x1b2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x1010, r3, 0xc9c5e000) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = syz_io_uring_complete(r4) r7 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000200)={0x20002010}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r5, &(0x7f0000000040)) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r8, &(0x7f0000000080)) 15:33:29 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x23000000, 0x0, 0x0) 15:33:29 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) fcntl$setown(r3, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r4, &(0x7f0000000080)) 15:33:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x40000000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:29 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xa6010000, 0x0, 0x0) 15:33:29 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x23010000, 0x0, 0x0) 15:33:29 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024", 0x21}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xf00000000000000) 15:33:29 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x7f, 0x4, 0x40, 0x81, 0x0, 0x1, 0x20200, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1afb1d8f, 0x2, @perf_config_ext={0x6, 0x4b9}, 0x4c910, 0x2, 0x10001, 0x3, 0x2, 0x7f, 0x1, 0x0, 0x80000000, 0x0, 0x1}, 0x0, 0x2, 0xffffffffffffffff, 0x0) 15:33:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x7ffffff7}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:29 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xa7000000, 0x0, 0x0) 15:33:29 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x24000000, 0x0, 0x0) 15:33:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034706bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 15:33:30 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x24010000, 0x0, 0x0) 15:33:30 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xa7010000, 0x0, 0x0) 15:33:30 executing program 2: r0 = epoll_create(0x9) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x412000, 0x0) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000040)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r4, &(0x7f0000000080)) 15:33:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x97ffffff}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:30 executing program 2: llistxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/153, 0x99) r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000200)={0x10000002}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) 15:33:30 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x25000000, 0x0, 0x0) 15:33:30 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024", 0x21}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x1000000000000000) 15:33:30 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xa8000000, 0x0, 0x0) 15:33:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xc8050000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:30 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x7, r3, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000080)='\'-)#&)/[-[\'K@\xb3-^^]!\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x7, r4, 0x9) ioctl$BTRFS_IOC_SCRUB_CANCEL(r4, 0x941c, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000140)={0xc0000001}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r5, &(0x7f0000000100)) 15:33:30 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x25010000, 0x0, 0x0) 15:33:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034707bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 15:33:30 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x2, 0xaa, 0x3, 0x0, 0x0, 0x5, 0x80000, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xfff, 0x7}, 0x2000, 0x800, 0xbd22, 0x4, 0xfffffffffffffff9, 0x4, 0x8, 0x0, 0xb766, 0x0, 0x6}, 0x0, 0xc, r1, 0x2) r2 = perf_event_open(&(0x7f0000000440)={0x5, 0x80, 0x1, 0x5, 0xa5, 0x7, 0x0, 0x0, 0x1202, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4d3, 0x4, @perf_config_ext={0x7, 0x3}, 0x100, 0x9, 0x2, 0x4, 0x2, 0x1, 0x1, 0x0, 0x7f, 0x0, 0x8}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x1, 0x80, 0x8, 0x1, 0x3, 0x81, 0x0, 0x8001, 0x10, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000380), 0xd}, 0x20, 0xffffffffffffff00, 0x9, 0x7, 0x1e6f, 0x7, 0x4f, 0x0, 0x280000, 0x0, 0x4}, 0xffffffffffffffff, 0xc, r2, 0x439b26c63bfbd8e1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x80002011}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000040)) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r5, &(0x7f0000000080)) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) r7 = dup3(r2, r3, 0x80000) perf_event_open(&(0x7f00000004c0)={0x3, 0x80, 0x3, 0x6, 0x80, 0x40, 0x0, 0x5, 0x342, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0x5, 0x401}, 0x10014, 0x7, 0x6, 0x1, 0x1f, 0x3, 0x5, 0x0, 0x5, 0x0, 0xffff}, 0xffffffffffffffff, 0x5, r7, 0x8) getgroups(0xa, &(0x7f0000000240)=[0x0, 0xee01, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0xee01]) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), 0x4, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@aname={'aname', 0x3d, '+m:}!['}}, {@access_any}, {@version_u}, {@cache_loose}, {@uname={'uname', 0x3d, '{\xaa'}}, {@version_9p2000}, {@dfltgid={'dfltgid', 0x3d, r8}}, {@aname={'aname', 0x3d, '{+'}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '%\xd1'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@seclabel}]}}) 15:33:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe0ffffff}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:30 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x26000000, 0x0, 0x0) 15:33:30 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xa8010000, 0x0, 0x0) 15:33:30 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0xa, 0x2) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) epoll_wait(r0, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], 0x6, 0x20) 15:33:31 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xa9000000, 0x0, 0x0) [ 2605.084556][T31338] validate_nla: 14 callbacks suppressed [ 2605.084568][T31338] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2605.104563][T31338] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2605.114608][T31338] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2605.124488][T31375] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 15:33:31 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024", 0x21}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x3900000000000000) 15:33:31 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x26010000, 0x0, 0x0) 15:33:31 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) 15:33:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xeffdffff}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:31 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xa9010000, 0x0, 0x0) 15:33:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034708bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 15:33:31 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) 15:33:31 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x27000000, 0x0, 0x0) 15:33:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:31 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xaa000000, 0x0, 0x0) 15:33:31 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x27010000, 0x0, 0x0) 15:33:31 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffc, 0x0, 0x8}, 0x0, 0xe, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) [ 2605.887127][T31423] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2605.911635][T31423] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2605.935009][T31423] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2605.944739][T31429] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 15:33:32 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024", 0x21}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x6b16000000000000) 15:33:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:32 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xaa010000, 0x0, 0x0) 15:33:32 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x28000000, 0x0, 0x0) 15:33:32 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = epoll_create1(0x80000) epoll_pwait(r3, &(0x7f0000000100), 0x0, 0xfffffffb, &(0x7f0000000140)={[0x2]}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) write$eventfd(r1, &(0x7f0000000100)=0x3, 0x8) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r4, &(0x7f0000000080)) 15:33:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034709bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 15:33:32 executing program 2: r0 = epoll_create(0x9) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e030a86df875f2e3ff5f163ee340b7679500800000000000000101013c5811039e0c775027ec8e66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5acc326d3a0dffc2c654"}, 0x80) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x40002000}) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000040)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r4, &(0x7f0000000080)) 15:33:32 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x28010000, 0x0, 0x0) 15:33:32 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xab000000, 0x0, 0x0) 15:33:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xfc000000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:32 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xab010000, 0x0, 0x0) 15:33:32 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x29000000, 0x0, 0x0) [ 2606.840087][T31486] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2606.851864][T31486] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 15:33:33 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024", 0x21}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x9effffff00000000) 15:33:33 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x29010000, 0x0, 0x0) 15:33:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xfe800000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:33 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)={0x20000007}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) 15:33:33 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xac000000, 0x0, 0x0) 15:33:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="39000000130003470abb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 15:33:33 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xac010000, 0x0, 0x0) 15:33:33 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x7, r1, 0x9) r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000040)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r4, &(0x7f0000000080)) 15:33:33 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x2a000000, 0x0, 0x0) 15:33:33 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xad000000, 0x0, 0x0) 15:33:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xfe80ffff}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:33 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x2a010000, 0x0, 0x0) 15:33:34 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024", 0x21}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xb40f000000000000) 15:33:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xfec0ffff}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:34 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x2b000000, 0x0, 0x0) 15:33:34 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xad010000, 0x0, 0x0) 15:33:34 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000040)) dup2(r3, r2) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) r6 = open(&(0x7f0000000180)='./file0\x00', 0x100, 0x42) sendto$inet(r6, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef92233f1e0a02bd60da03059bcecc7a95425a3a07e758044ab4ea6f7ae56d88fecf9141a7511bf746bec66ba", 0x4d, 0x20cc9a, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000140)={0x80000002}) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r7, &(0x7f0000000080)) 15:33:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="39000000130003470bbb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 15:33:34 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xae000000, 0x0, 0x0) 15:33:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xff000000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:34 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x2b010000, 0x0, 0x0) 15:33:34 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xae010000, 0x0, 0x0) 15:33:34 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x7, r2, 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6, 0x10, 0x0, 0x4, 0x0, 0x5, 0x84088, 0x5, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xf7a, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x10000, 0x6, 0x3, 0x3, 0x40e29179, 0x7, 0xae, 0x0, 0x80, 0x0, 0x5}, 0xffffffffffffffff, 0x9, r2, 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000040)) ioctl$BTRFS_IOC_DEFRAG(r3, 0x50009402, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r4, &(0x7f0000000080)) 15:33:34 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x2c000000, 0x0, 0x0) 15:33:35 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024", 0x21}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xc00e000000000000) 15:33:35 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xaf000000, 0x0, 0x0) 15:33:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xffff0000}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:35 executing program 2: r0 = epoll_create(0x40000001) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x0) epoll_pwait(r3, &(0x7f0000000100)=[{}], 0x1, 0x2b, &(0x7f0000000140)={[0x3]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x40010, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616ee63d66642c7266646e6f3d", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',noextend,fowner<', @ANYRESDEC=0xee00, @ANYBLOB=',\x00']) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r4, &(0x7f0000000080)) 15:33:35 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x2c010000, 0x0, 0x0) 15:33:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="39000000130003470cbb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 15:33:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xffff80fe}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:35 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xaf010000, 0x0, 0x0) 15:33:35 executing program 2: r0 = epoll_create(0x9) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x141000, 0xc8, 0x3}, 0x18) epoll_wait(r1, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0x7ff) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000001c0)={0x10000000}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r4, &(0x7f0000000080)) 15:33:35 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x2d000000, 0x0, 0x0) 15:33:35 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xb0000000, 0x0, 0x0) 15:33:35 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x2d010000, 0x0, 0x0) 15:33:36 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024", 0x21}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xeaffffff00000000) 15:33:36 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = pidfd_open(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000100)={0xc}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r4, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000140)={0x16}) 15:33:36 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xb0010000, 0x0, 0x0) 15:33:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xffffc0fe}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:36 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x2e000000, 0x0, 0x0) 15:33:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="39000000130003470dbb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 15:33:36 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x10000008}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) 15:33:36 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xb1000000, 0x0, 0x0) 15:33:36 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x2e010000, 0x0, 0x0) 15:33:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xfffffdef}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:36 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = gettid() tkill(r4, 0x34) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x9, 0x79, 0xff, 0x0, 0x0, 0xe6, 0x20, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x80000000, 0x4, @perf_config_ext={0x3, 0x4013}, 0x40882, 0x7, 0x3, 0x7, 0x2, 0x8001, 0x1, 0x0, 0x2, 0x0, 0x2}, r4, 0xa, 0xffffffffffffffff, 0xa) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) 15:33:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) [ 2610.236141][T31709] validate_nla: 14 callbacks suppressed [ 2610.236153][T31709] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2610.331364][T31719] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2610.341959][T31719] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2610.350761][T31709] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 15:33:36 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024", 0x21}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xefffffff00000000) 15:33:36 executing program 2: r0 = epoll_create(0x9) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, r1, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000000c0)) gettid() pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000040)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r4, &(0x7f0000000080)) 15:33:36 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xb1010000, 0x0, 0x0) 15:33:36 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x2f000000, 0x0, 0x0) 15:33:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xffffff97}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="39000000130003470ebb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 15:33:37 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x8000, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) 15:33:37 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xb2000000, 0x0, 0x0) 15:33:37 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x2f010000, 0x0, 0x0) 15:33:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:37 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xb2010000, 0x0, 0x0) 15:33:37 executing program 2: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)) r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) [ 2611.186650][T31771] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2611.199456][T31771] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2611.209451][T31771] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2611.218756][T31774] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 15:33:37 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024", 0x21}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xf0ffffff00000000) 15:33:37 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x30000000, 0x0, 0x0) 15:33:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:37 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xb3000000, 0x0, 0x0) 15:33:37 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044ab4ea6f7ae56d88fecf9141a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) dup2(r2, r3) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000040)) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r5, &(0x7f0000000080)) 15:33:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034710bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 15:33:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034706bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 15:33:37 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x30010000, 0x0, 0x0) 15:33:37 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xb3010000, 0x0, 0x0) 15:33:37 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x31000000, 0x0, 0x0) 15:33:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:37 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xb4000000, 0x0, 0x0) [ 2611.974589][T31804] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2612.025356][T31804] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 2612.355210][ C1] ================================================================== [ 2612.363583][ C1] BUG: KCSAN: data-race in internal_add_timer / timer_clear_idle [ 2612.371310][ C1] [ 2612.373615][ C1] write to 0xffff888237c176e5 of 1 bytes by task 0 on cpu 0: [ 2612.380973][ C1] timer_clear_idle+0x1e/0x30 [ 2612.385629][ C1] tick_nohz_idle_retain_tick+0x31/0x40 [ 2612.391159][ C1] do_idle+0x1e8/0x250 [ 2612.395206][ C1] cpu_startup_entry+0x15/0x20 [ 2612.399987][ C1] rest_init+0xee/0x100 [ 2612.404122][ C1] arch_call_rest_init+0xa/0xb [ 2612.408858][ C1] start_kernel+0x5e4/0x669 [ 2612.413337][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 2612.419204][ C1] [ 2612.421509][ C1] read to 0xffff888237c176e5 of 1 bytes by interrupt on cpu 1: [ 2612.429039][ C1] internal_add_timer+0x22d/0x280 [ 2612.434037][ C1] add_timer_on+0x262/0x2a0 [ 2612.438516][ C1] clocksource_watchdog+0xa74/0xac0 [ 2612.443695][ C1] call_timer_fn+0x2e/0x1d0 [ 2612.448174][ C1] expire_timers+0x135/0x240 [ 2612.452735][ C1] __run_timers+0x378/0x440 [ 2612.457212][ C1] run_timer_softirq+0x19/0x30 [ 2612.462143][ C1] __do_softirq+0x12c/0x26e [ 2612.466619][ C1] irq_exit_rcu+0x4e/0xa0 [ 2612.470930][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 2612.476639][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2612.482595][ C1] acpi_idle_enter+0x258/0x2e0 [ 2612.487349][ C1] cpuidle_enter_state+0x2b4/0x760 [ 2612.492436][ C1] cpuidle_enter+0x3c/0x60 [ 2612.496838][ C1] do_idle+0x1a3/0x250 [ 2612.500888][ C1] cpu_startup_entry+0x15/0x20 [ 2612.505646][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 2612.511517][ C1] [ 2612.513814][ C1] value changed: 0x01 -> 0x00 [ 2612.518462][ C1] [ 2612.520763][ C1] Reported by Kernel Concurrency Sanitizer on: [ 2612.526972][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.15.0-rc2-syzkaller #0 [ 2612.534928][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2612.544966][ C1] ================================================================== 15:33:38 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024", 0x21}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xfeffffff00000000) 15:33:38 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x31010000, 0x0, 0x0) 15:33:38 executing program 2: r0 = epoll_create(0x9) r1 = perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa507, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x1000}, 0x1000, 0x7fff, 0x10000, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r7}, {}, {r6}, {r6}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {0x0, r7}, {}, {r5, r7}, {0x0, r7}, {}, {}, {}, {0x0, r7}, {r6}, {0x0, r7}, {0x0, r7}, {r6}, {0x0, r7}, {}, {}, {r5}, {0x0, r7}, {}, {}, {r5, r7}, {}, {}, {0x0, r7}, {0x0, r7}, {}, {r5, r7}, {}, {}, {r6}, {}, {0x0, r7}, {r6}, {}, {r6}, {0x0, r7}, {}, {r5, r7}, {0x0, r7}, {r5}, {}, {r6}, {r5}, {}, {r6, r7}, {}, {0x0, r7}, {0x0, r7}, {}, {0x0, r7}, {r6, r7}, {}, {0x0, r7}, {0x0, r7}, {r6}, {r5, r7}, {r5}, {r5}, {}, {}, {}, {}, {r6}, {r5}, {0x0, r7}, {}, {}, {0x0, r7}, {r6}, {}, {}, {0x0, r7}, {r5}, {}, {}, {r6, r7}, {r5}, {}, {}, {0x0, r7}, {}, {}, {0x0, r7}, {}, {}, {r5, r7}, {}, {r5}, {0x0, r7}, {0x0, r7}, {0x0, r7}, {0x0, r7}, {}, {}, {}, {}, {}, {0x0, r7}, {r5, r7}, {}, {0x0, r7}, {r5}, {r6}, {}, {0x0, r7}, {r5}, {r6, r7}, {}, {r5}, {r5, r7}, {}, {}, {}, {}, {0x0, r7}, {0x0, r7}, {}, {}, {r5, r7}, {0x0, r7}, {0x0, r7}, {r5, r7}, {r6, r7}, {0x0, r7}, {}, {r6, r7}, {r6}, {}, {0x0, r7}, {r5}, {}, {r6}, {}, {}, {}, {0x0, r7}, {}, {}, {0x0, r7}, {r6}, {0x0, r7}, {r6}, {r5}, {}, {}, {}, {0x0, r7}, {r5, r7}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {r5}, {r5}, {0x0, r7}, {r5, r7}, {0x0, r7}, {}, {}, {}, {}, {0x0, r7}, {r6}, {0x0, r7}, {0x0, r7}, {0x0, r7}, {}, {}, {}, {0x0, r7}, {r6}, {r5}, {}, {r5}, {}, {}, {}, {0x0, r7}, {r6, r7}, {0x0, r7}, {}, {r6, r7}, {0x0, r7}, {}, {r6, r7}, {}, {}, {r5}, {}, {r5}, {}, {}, {r5, r7}, {}, {}, {0x0, r7}, {r6}, {0x0, r7}, {r5}, {r6}, {}, {}, {}, {r6}, {0x0, r7}, {}, {r5}, {r5, 0x0}, {}, {0x0, r7}, {0x0, r7}, {0x0, r7}, {0x0, r7}, {}, {0x0, r7}, {}, {r6, r7}, {r5, r7}, {r6, r7}, {}, {r5}, {}, {}, {r5}, {}, {}, {r5, r7}, {0x0, r7}, {r6}, {r6}, {r5}, {0x0, r7}, {0x0, r7}, {}, {}, {0x0, r7}, {}, {0x0, r7}, {r5}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000054f40)={0x0, 0x0, "a4b80581d94dab801cfc847d02f8c1a8a1e6cbe4d99932132c7dcc9f267b05d6a44067675dd4824df3d794c2082f60b1b1443256ff59aa915738608926836ea5ff291bb3805bbbd611bba5b6a208d655fe011485fe83653615483ae418da8dfed2366007ccc83714ccaa5b550fc86a546dc1420899ca93b7ab77c15df133ea13d175d9919830e8b88f600b1b7a894540fa837b1c828fc3fefbf0c8ef0cd1503a3dcb92ce45a43cdc8579a9356bb02fe84df2ffbd25cbe83ebbc0a5936b387c09baf5bf9d6cad9ba5955b5ea8a2092c88883026b6d928f733aa78e6ff75d1508f3ce80ce50260122e4144fbc7efe0463adc96baeb79bb98f20635127097805b33", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x4, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000056f40)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r9}, {}, {r10}], 0x0, "6ac352d1b76f87"}) r11 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r11, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r12 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r12, 0xd000943d, &(0x7f0000058c40)={0x1, [{0x0, r15}, {}, {r14}, {r14}, {}, {}, {}, {}, {}, {r14}, {0x0, r15}, {}, {}, {0x0, r15}, {}, {r14, r15}, {0x0, r15}, {}, {}, {}, {0x0, r15}, {r14}, {0x0, r15}, {0x0, r15}, {r14}, {0x0, r15}, {}, {}, {r13}, {0x0, r15}, {}, {}, {r13, r15}, {}, {}, {0x0, r15}, {0x0, r15}, {}, {r13, r15}, {}, {}, {r14}, {}, {0x0, r15}, {r14}, {}, {r14}, {0x0, r15}, {}, {r13, r15}, {0x0, r15}, {r13}, {}, {r14}, {r13}, {}, {r14, r15}, {}, {0x0, r15}, {0x0, r15}, {}, {0x0, r15}, {r14, r15}, {}, {0x0, r15}, {0x0, r15}, {r14}, {r13, r15}, {r13}, {r13}, {}, {}, {}, {}, {r14}, {r13}, {0x0, r15}, {}, {}, {0x0, r15}, {r14}, {}, {}, {0x0, r15}, {r13}, {}, {}, {0x0, r15}, {r13}, {}, {}, {0x0, r15}, {}, {r13}, {0x0, r15}, {}, {}, {r13, r15}, {}, {r13}, {0x0, r15}, {0x0, r15}, {0x0, r15}, {0x0, r15}, {}, {}, {}, {}, {}, {0x0, r15}, {r13, r15}, {}, {r14, r15}, {r13}, {r14}, {}, {0x0, r15}, {r13}, {r14, r15}, {}, {r13}, {r13, r15}, {}, {}, {}, {}, {0x0, r15}, {0x0, r15}, {}, {}, {r13, r15}, {0x0, r15}, {0x0, r15}, {r13, r15}, {r14, r15}, {0x0, r15}, {}, {r14, r15}, {r14}, {}, {0x0, r15}, {r13}, {}, {r14}, {}, {}, {}, {0x0, r15}, {}, {}, {0x0, r15}, {r14}, {0x0, r15}, {r14}, {r13}, {}, {}, {}, {0x0, r15}, {r13, r15}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {r13}, {r13}, {0x0, r15}, {r13, r15}, {0x0, r15}, {}, {}, {}, {}, {0x0, r15}, {r14}, {0x0, r15}, {0x0, r15}, {0x0, r15}, {}, {}, {}, {0x0, r15}, {r14}, {r13}, {}, {r13}, {}, {}, {r14}, {0x0, r15}, {r14, r15}, {0x0, r15}, {}, {r14, r15}, {0x0, r15}, {}, {r14, r15}, {}, {}, {r13}, {}, {r13}, {}, {}, {r13, r15}, {}, {}, {0x0, r15}, {r14}, {0x0, r15}, {r13}, {r14}, {}, {}, {}, {r14}, {0x0, r15}, {}, {r13}, {r13}, {}, {0x0, r15}, {0x0, r15}, {0x0, r15}, {0x0, r15}, {}, {0x0, r15}, {}, {r14, r15}, {r13, r15}, {r14, r15}, {}, {r13}, {}, {}, {}, {}, {}, {r13, r15}, {0x0, r15}, {r14}, {r14}, {r13}, {0x0, r15}, {0x0, r15}, {}, {}, {}, {}, {0x0, r15}, {r13}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000051fc0)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {0x0, r15}], 0x5, "2108ceddb50069"}) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r3, &(0x7f0000000080)) 15:33:38 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xb4010000, 0x0, 0x0) 15:33:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x2}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034711bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 15:33:38 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x32000000, 0x0, 0x0) 15:33:38 executing program 2: r0 = epoll_create(0x9) epoll_create1(0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x2}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000040)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r4, &(0x7f0000000080)) r5 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x2, 0x177) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x7, r6, 0x9) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e030a86df875f2e3ff5f163ee340b7679500800000000000000101013c5811039e0c775027ec8e66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5acc326d3a0dffc2c654"}, 0x80) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x200002, 0x0) poll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x20}, {r0, 0x8}, {r5, 0x1000}, {r6, 0xa}, {r7, 0xc202}, {r8, 0x441}, {r1, 0x8140}, {r2, 0x82}], 0x8, 0xffff) [ 2612.772015][ C0] sd 0:0:1:0: tag#5470 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 2612.781888][ C0] sd 0:0:1:0: tag#5470 CDB: opcode=0xe5 (vendor) [ 2612.788421][ C0] sd 0:0:1:0: tag#5470 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 2612.797465][ C0] sd 0:0:1:0: tag#5470 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 2612.806523][ C0] sd 0:0:1:0: tag#5470 CDB[20]: ba 15:33:38 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xb5000000, 0x0, 0x0) 15:33:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x3}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:38 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x32010000, 0x0, 0x0) 15:33:38 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xb5010000, 0x0, 0x0) 15:33:39 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024", 0x21}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xffffffff00000000) 15:33:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x4}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:39 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x33000000, 0x0, 0x0) 15:33:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034712bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 15:33:39 executing program 2: r0 = epoll_create(0x9) epoll_create1(0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x2}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000040)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r4, &(0x7f0000000080)) r5 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x2, 0x177) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x7, r6, 0x9) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e030a86df875f2e3ff5f163ee340b7679500800000000000000101013c5811039e0c775027ec8e66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5acc326d3a0dffc2c654"}, 0x80) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x200002, 0x0) poll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x20}, {r0, 0x8}, {r5, 0x1000}, {r6, 0xa}, {r7, 0xc202}, {r8, 0x441}, {r1, 0x8140}, {r2, 0x82}], 0x8, 0xffff) 15:33:39 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xb6000000, 0x0, 0x0) 15:33:39 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x33010000, 0x0, 0x0) 15:33:39 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xb6010000, 0x0, 0x0) 15:33:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x5}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:39 executing program 2: r0 = epoll_create(0x9) epoll_create1(0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x2}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000040)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r4, &(0x7f0000000080)) r5 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x2, 0x177) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x7, r6, 0x9) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e030a86df875f2e3ff5f163ee340b7679500800000000000000101013c5811039e0c775027ec8e66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5acc326d3a0dffc2c654"}, 0x80) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x200002, 0x0) poll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x20}, {r0, 0x8}, {r5, 0x1000}, {r6, 0xa}, {r7, 0xc202}, {r8, 0x441}, {r1, 0x8140}, {r2, 0x82}], 0x8, 0xffff) 15:33:39 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x34000000, 0x0, 0x0) 15:33:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x6}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:39 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xb7000000, 0x0, 0x0) 15:33:40 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024", 0x21}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0xffffffffffffffff) 15:33:40 executing program 2: r0 = epoll_create(0x9) epoll_create1(0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x2}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000040)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r4, &(0x7f0000000080)) r5 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x2, 0x177) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x7, r6, 0x9) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e030a86df875f2e3ff5f163ee340b7679500800000000000000101013c5811039e0c775027ec8e66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5acc326d3a0dffc2c654"}, 0x80) poll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x20}, {r0, 0x8}, {r5, 0x1000}, {r6, 0xa}, {r7, 0xc202}, {0xffffffffffffffff, 0x441}, {r1, 0x8140}, {r2, 0x82}], 0x8, 0xffff) 15:33:40 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xb7010000, 0x0, 0x0) 15:33:40 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x34010000, 0x0, 0x0) 15:33:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x7}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034716bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 15:33:40 executing program 2: r0 = epoll_create(0x9) epoll_create1(0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x2}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000040)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r4, &(0x7f0000000080)) r5 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x2, 0x177) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x7, r6, 0x9) r7 = socket(0x11, 0x800000003, 0x0) poll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x20}, {r0, 0x8}, {r5, 0x1000}, {r6, 0xa}, {r7, 0xc202}, {0xffffffffffffffff, 0x441}, {r1, 0x8140}, {r2, 0x82}], 0x8, 0xffff) 15:33:40 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xb8000000, 0x0, 0x0) 15:33:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x8}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:40 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x35000000, 0x0, 0x0) 15:33:40 executing program 2: r0 = epoll_create(0x9) epoll_create1(0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x2}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000040)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r4, &(0x7f0000000080)) r5 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x2, 0x177) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x7, r6, 0x9) poll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x20}, {r0, 0x8}, {r5, 0x1000}, {r6, 0xa}, {0xffffffffffffffff, 0xc202}, {0xffffffffffffffff, 0x441}, {r1, 0x8140}, {r2, 0x82}], 0x8, 0xffff) 15:33:40 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xb8010000, 0x0, 0x0) 15:33:41 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024", 0x21}], 0x1}, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x1400000004ffdc, 0x0) 15:33:41 executing program 2: r0 = epoll_create(0x9) epoll_create1(0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x2}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000040)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r4, &(0x7f0000000080)) r5 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x2, 0x177) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x20}, {r0, 0x8}, {r5, 0x1000}, {r6, 0xa}, {0xffffffffffffffff, 0xc202}, {0xffffffffffffffff, 0x441}, {r1, 0x8140}, {r2, 0x82}], 0x8, 0xffff) 15:33:41 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x35010000, 0x0, 0x0) 15:33:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x11}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:41 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xb9000000, 0x0, 0x0) 15:33:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034717bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 15:33:41 executing program 2: r0 = epoll_create(0x9) epoll_create1(0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x2}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000040)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r4, &(0x7f0000000080)) r5 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x2, 0x177) poll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x20}, {r0, 0x8}, {r5, 0x1000}, {0xffffffffffffffff, 0xa}, {0xffffffffffffffff, 0xc202}, {0xffffffffffffffff, 0x441}, {r1, 0x8140}, {r2, 0x82}], 0x8, 0xffff) 15:33:41 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xb9010000, 0x0, 0x0) 15:33:41 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x36000000, 0x0, 0x0) 15:33:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0xfc}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:41 executing program 2: r0 = epoll_create(0x9) epoll_create1(0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x2}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000040)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0xa, r4, &(0x7f0000000080)) poll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x20}, {r0, 0x8}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0xa}, {0xffffffffffffffff, 0xc202}, {0xffffffffffffffff, 0x441}, {r1, 0x8140}, {r2, 0x82}], 0x8, 0xffff) 15:33:41 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x36010000, 0x0, 0x0) [ 2615.607385][T32023] validate_nla: 16 callbacks suppressed [ 2615.607400][T32023] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2615.623081][T32023] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2615.634973][T32023] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2615.643870][T32026] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 15:33:42 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024", 0x21}], 0x1}, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x22200, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e24, 0xe403, @remote, 0x5}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:33:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x300}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:42 executing program 2: r0 = epoll_create(0x9) epoll_create1(0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x2}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000040)) socket$inet(0x2, 0x4000000000000001, 0x0) poll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x20}, {r0, 0x8}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0xa}, {0xffffffffffffffff, 0xc202}, {0xffffffffffffffff, 0x441}, {r1, 0x8140}, {r2, 0x82}], 0x8, 0xffff) 15:33:42 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xba000000, 0x0, 0x0) 15:33:42 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x37000000, 0x0, 0x0) 15:33:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034718bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 15:33:42 executing program 2: r0 = epoll_create(0x9) epoll_create1(0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x2}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000040)) poll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x20}, {r0, 0x8}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0xa}, {0xffffffffffffffff, 0xc202}, {0xffffffffffffffff, 0x441}, {r1, 0x8140}, {r2, 0x82}], 0x8, 0xffff) 15:33:42 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x37010000, 0x0, 0x0) 15:33:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x500}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:42 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xba010000, 0x0, 0x0) 15:33:42 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x38000000, 0x0, 0x0) 15:33:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x5c8}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) [ 2616.446531][T32063] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2616.490568][T32063] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2616.500503][T32063] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2616.509484][T32073] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 15:33:43 executing program 1: socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x7, r3, 0x9) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) splice(r3, &(0x7f0000000080)=0x1000, r4, &(0x7f00000000c0)=0x5, 0x7, 0xb) socket$inet6(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024", 0x21}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 15:33:43 executing program 2: r0 = epoll_create(0x9) epoll_create1(0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x2}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) poll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x20}, {r0, 0x8}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0xa}, {0xffffffffffffffff, 0xc202}, {0xffffffffffffffff, 0x441}, {r1, 0x8140}, {r2, 0x82}], 0x8, 0xffff) 15:33:43 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x38010000, 0x0, 0x0) 15:33:43 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xbb000000, 0x0, 0x0) 15:33:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x600}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="39000000130003471ebb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) 15:33:43 executing program 2: r0 = epoll_create(0x9) epoll_create1(0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x2}) poll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x20}, {r0, 0x8}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0xa}, {0xffffffffffffffff, 0xc202}, {0xffffffffffffffff, 0x441}, {r1, 0x8140}, {0xffffffffffffffff, 0x82}], 0x8, 0xffff) 15:33:43 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0x39000000, 0x0, 0x0) 15:33:43 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xbb010000, 0x0, 0x0) 15:33:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x700}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:43 executing program 2: r0 = epoll_create(0x9) epoll_create1(0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x20}, {r0, 0x8}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0xa}, {0xffffffffffffffff, 0xc202}, {0xffffffffffffffff, 0x441}, {r1, 0x8140}, {0xffffffffffffffff, 0x82}], 0x8, 0xffff) 15:33:43 executing program 5: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x69c1, 0x0, 0xbc000000, 0x0, 0x0) [ 2617.408819][T32118] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2617.421395][T32118] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 15:33:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {r3}, {r3, 0x0}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r2, r4}, {}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r2}, {}, {r3}, {r2}, {}, {r3}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {r3, r4}, {r2}, {}, {}, {0x0, r4}, {r2}, {r3, r4}, {}, {r2}, {r2, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {r2}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {}, {}, {}, {r2}, {}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {r3}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r2}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r3}, {r2}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r3, r4}, {0x0, r4}, {}, {r3, r4}, {0x0, r4}, {}, {r3}, {}, {}, {r2}, {}, {r2}, {}, {}, {r2, r4}, {}, {}, {}, {r3}, {0x0, r4}, {r2}, {r3}, {}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {r2}, {r3, r4}, {}, {r2}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r3}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000055f40)={{0x0, 0x5, 0x400, 0x1b26, 0x8, 0x0, 0x1000, 0x2, 0x8, 0x5, 0xee, 0x62, 0x2, 0x0, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b40)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x8, "b0e56554a56b4a"}) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) sendmmsg$inet6(r7, &(0x7f00000012c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x810}], 0x1, 0x48000) sendmmsg(r7, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f0000000280)}], 0x3, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) 15:33:44 executing program 2: r0 = epoll_create(0x9) epoll_create1(0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x20}, {r0, 0x8}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0xa}, {0xffffffffffffffff, 0xc202}, {0xffffffffffffffff, 0x441}, {r1, 0x8140}, {0xffffffffffffffff, 0x82}], 0x8, 0xffff) 15:33:44 executing program 4: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xf