}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:21 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r1, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r2 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:21 executing program 0: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, r0) syz_open_dev$video4linux(&(0x7f0000000300)='/dev/v4l-subdev#\x00', 0x8, 0x220800) r1 = socket(0xf, 0x2, 0x401) syz_genetlink_get_family_id$wireguard(&(0x7f0000000340)='wireguard\x00', r1) syz_genetlink_get_family_id$gtp(&(0x7f0000006c40)='gtp\x00', 0xffffffffffffffff) 17:53:21 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, &(0x7f0000000cc0)) 17:53:21 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x8001, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002e00)={&(0x7f0000002d40)={0xb4, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8800}, 0x8008) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002f40)='/dev/vcsa\x00', 0x12400, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:21 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x200001, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x4000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8, 0x0, {0x0, 0x0, r0}}, 0x5) 17:53:21 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:21 executing program 0: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00', 0xffffffffffffffff) syz_open_dev$video4linux(&(0x7f0000000300)='/dev/v4l-subdev#\x00', 0x8, 0x220800) r0 = socket(0xf, 0x2, 0x401) syz_genetlink_get_family_id$wireguard(&(0x7f0000000340)='wireguard\x00', r0) syz_genetlink_get_family_id$gtp(&(0x7f0000006c40)='gtp\x00', 0xffffffffffffffff) 17:53:21 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000c80)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8, 0x0, 0x3, 0x6, 0x4023, 0x8000}, &(0x7f0000000cc0)=0x20) 17:53:21 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r1, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r2 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:21 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002e00)={&(0x7f0000002d40)={0xb4, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8800}, 0x8008) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002f40)='/dev/vcsa\x00', 0x12400, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:21 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x4000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:21 executing program 0: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00', 0xffffffffffffffff) syz_open_dev$video4linux(&(0x7f0000000300)='/dev/v4l-subdev#\x00', 0x8, 0x220800) r0 = socket(0xf, 0x2, 0x401) syz_genetlink_get_family_id$wireguard(&(0x7f0000000340)='wireguard\x00', r0) syz_genetlink_get_family_id$gtp(&(0x7f0000006c40)='gtp\x00', 0xffffffffffffffff) 17:53:21 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000c80)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x3, 0x6, 0x4023, 0x8000}, &(0x7f0000000cc0)=0x20) 17:53:21 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r1, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r2 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:21 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:21 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000002e40)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002e00)={&(0x7f0000002d40)={0xb4, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r0}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8800}, 0x8008) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002f40)='/dev/vcsa\x00', 0x12400, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8}, {0x8}, {0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r0}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:21 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x4000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:22 executing program 0: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00', 0xffffffffffffffff) syz_open_dev$video4linux(&(0x7f0000000300)='/dev/v4l-subdev#\x00', 0x8, 0x220800) r0 = socket(0xf, 0x2, 0x401) syz_genetlink_get_family_id$wireguard(&(0x7f0000000340)='wireguard\x00', r0) syz_genetlink_get_family_id$gtp(&(0x7f0000006c40)='gtp\x00', 0xffffffffffffffff) 17:53:22 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000c80)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x6, 0x4023, 0x8000}, &(0x7f0000000cc0)=0x20) 17:53:22 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r1 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r1, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:22 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r1, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r2 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:22 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000002e40)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002e00)={&(0x7f0000002d40)={0xb4, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r0}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8800}, 0x8008) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002f40)='/dev/vcsa\x00', 0x12400, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8}, {0x8}, {0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r0}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:22 executing program 5: syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x4000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:22 executing program 0: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00', r0) syz_open_dev$video4linux(0x0, 0x8, 0x220800) r1 = socket(0xf, 0x2, 0x401) syz_genetlink_get_family_id$wireguard(&(0x7f0000000340)='wireguard\x00', r1) syz_genetlink_get_family_id$gtp(&(0x7f0000006c40)='gtp\x00', 0xffffffffffffffff) 17:53:22 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r1, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r2 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:22 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r1 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r1, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:22 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000c80)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x4023, 0x8000}, &(0x7f0000000cc0)=0x20) 17:53:22 executing program 0: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00', r0) syz_open_dev$video4linux(0x0, 0x8, 0x220800) r1 = socket(0xf, 0x2, 0x401) syz_genetlink_get_family_id$wireguard(&(0x7f0000000340)='wireguard\x00', r1) syz_genetlink_get_family_id$gtp(&(0x7f0000006c40)='gtp\x00', 0xffffffffffffffff) 17:53:22 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000002e40)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002e00)={&(0x7f0000002d40)={0xb4, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r0}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8800}, 0x8008) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002f40)='/dev/vcsa\x00', 0x12400, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8}, {0x8}, {0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r0}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:22 executing program 5: syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x4000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:22 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000c80)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, &(0x7f0000000cc0)=0x20) 17:53:22 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:22 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r1 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r1, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:22 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, 0x0, 0x8008) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002f40)='/dev/vcsa\x00', 0x12400, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:22 executing program 0: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00', r0) syz_open_dev$video4linux(0x0, 0x8, 0x220800) r1 = socket(0xf, 0x2, 0x401) syz_genetlink_get_family_id$wireguard(&(0x7f0000000340)='wireguard\x00', r1) syz_genetlink_get_family_id$gtp(&(0x7f0000006c40)='gtp\x00', 0xffffffffffffffff) 17:53:22 executing program 5: syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x4000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:22 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000c80)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, &(0x7f0000000cc0)=0x20) 17:53:22 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:23 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, 0x0, 0x8008) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002f40)='/dev/vcsa\x00', 0x12400, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:23 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r1 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r1, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:23 executing program 0: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00', r0) syz_open_dev$video4linux(&(0x7f0000000300)='/dev/v4l-subdev#\x00', 0x0, 0x220800) r1 = socket(0xf, 0x2, 0x401) syz_genetlink_get_family_id$wireguard(&(0x7f0000000340)='wireguard\x00', r1) syz_genetlink_get_family_id$gtp(&(0x7f0000006c40)='gtp\x00', 0xffffffffffffffff) 17:53:23 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, 0x0, 0x4000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:23 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000c80)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0) 17:53:23 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:23 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, 0x0, 0x8008) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002f40)='/dev/vcsa\x00', 0x12400, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:23 executing program 0: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00', r0) syz_open_dev$video4linux(&(0x7f0000000300)='/dev/v4l-subdev#\x00', 0x0, 0x220800) r1 = socket(0xf, 0x2, 0x401) syz_genetlink_get_family_id$wireguard(&(0x7f0000000340)='wireguard\x00', r1) syz_genetlink_get_family_id$gtp(&(0x7f0000006c40)='gtp\x00', 0xffffffffffffffff) 17:53:23 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r1 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r1, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:23 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000c80)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0) 17:53:23 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, 0x0, 0x4000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:23 executing program 4: setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r1, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:23 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002d40)={0xb4, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8800}, 0x8008) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002f40)='/dev/vcsa\x00', 0x12400, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:23 executing program 0: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00', r0) syz_open_dev$video4linux(&(0x7f0000000300)='/dev/v4l-subdev#\x00', 0x0, 0x220800) r1 = socket(0xf, 0x2, 0x401) syz_genetlink_get_family_id$wireguard(&(0x7f0000000340)='wireguard\x00', r1) syz_genetlink_get_family_id$gtp(&(0x7f0000006c40)='gtp\x00', 0xffffffffffffffff) 17:53:23 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000c80)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0) 17:53:23 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, 0x0, 0x4000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:23 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r1 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r1, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:23 executing program 4: setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r1, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:23 executing program 0: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00', r0) syz_open_dev$video4linux(&(0x7f0000000300)='/dev/v4l-subdev#\x00', 0x8, 0x0) r1 = socket(0xf, 0x2, 0x401) syz_genetlink_get_family_id$wireguard(&(0x7f0000000340)='wireguard\x00', r1) syz_genetlink_get_family_id$gtp(&(0x7f0000006c40)='gtp\x00', 0xffffffffffffffff) 17:53:23 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x8008) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002f40)='/dev/vcsa\x00', 0x12400, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:23 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002d40)={0xb4, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8800}, 0x8008) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002f40)='/dev/vcsa\x00', 0x12400, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:23 executing program 0: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00', r0) syz_open_dev$video4linux(&(0x7f0000000300)='/dev/v4l-subdev#\x00', 0x8, 0x0) r1 = socket(0x0, 0x2, 0x401) syz_genetlink_get_family_id$wireguard(&(0x7f0000000340)='wireguard\x00', r1) syz_genetlink_get_family_id$gtp(&(0x7f0000006c40)='gtp\x00', 0xffffffffffffffff) 17:53:23 executing program 4: setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r1, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:23 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:23 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x8008) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002f40)='/dev/vcsa\x00', 0x12400, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:24 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002d40)={0xb4, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8800}, 0x8008) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002f40)='/dev/vcsa\x00', 0x12400, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:24 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:24 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:24 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x8008) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002f40)='/dev/vcsa\x00', 0x12400, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:24 executing program 0: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00', r0) syz_open_dev$video4linux(&(0x7f0000000300)='/dev/v4l-subdev#\x00', 0x8, 0x0) r1 = socket(0x0, 0x2, 0x401) syz_genetlink_get_family_id$wireguard(&(0x7f0000000340)='wireguard\x00', r1) syz_genetlink_get_family_id$gtp(&(0x7f0000006c40)='gtp\x00', 0xffffffffffffffff) 17:53:24 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002d40)={0xb4, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8800}, 0x8008) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002f40)='/dev/vcsa\x00', 0x12400, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:24 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:24 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:24 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:24 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x8008) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002f40)='/dev/vcsa\x00', 0x12400, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:24 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002d40)={0xb4, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8800}, 0x8008) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:24 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:24 executing program 0: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00', r0) syz_open_dev$video4linux(&(0x7f0000000300)='/dev/v4l-subdev#\x00', 0x8, 0x0) r1 = socket(0x0, 0x2, 0x401) syz_genetlink_get_family_id$wireguard(&(0x7f0000000340)='wireguard\x00', r1) syz_genetlink_get_family_id$gtp(&(0x7f0000006c40)='gtp\x00', 0xffffffffffffffff) 17:53:24 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}}, 0x8008) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002f40)='/dev/vcsa\x00', 0x12400, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:24 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:24 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:24 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002d40)={0xb4, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8800}, 0x8008) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:24 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:24 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002f40)='/dev/vcsa\x00', 0x12400, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:24 executing program 0: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00', r0) syz_open_dev$video4linux(&(0x7f0000000300)='/dev/v4l-subdev#\x00', 0x8, 0x0) r1 = socket(0xf, 0x0, 0x401) syz_genetlink_get_family_id$wireguard(&(0x7f0000000340)='wireguard\x00', r1) syz_genetlink_get_family_id$gtp(&(0x7f0000006c40)='gtp\x00', 0xffffffffffffffff) 17:53:24 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:24 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:25 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002d40)={0xb4, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8800}, 0x8008) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:25 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002f40)='/dev/vcsa\x00', 0x12400, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:25 executing program 0: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00', r0) syz_open_dev$video4linux(&(0x7f0000000300)='/dev/v4l-subdev#\x00', 0x8, 0x0) r1 = socket(0xf, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000340)='wireguard\x00', r1) syz_genetlink_get_family_id$gtp(&(0x7f0000006c40)='gtp\x00', 0xffffffffffffffff) 17:53:25 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [], 0x10, "319f6a0df8d389"}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r0}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r1 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r1, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:25 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:25 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002f40)='/dev/vcsa\x00', 0x12400, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:25 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002d40)={0xb4, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8800}, 0x8008) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:25 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:25 executing program 0: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00', r0) syz_open_dev$video4linux(&(0x7f0000000300)='/dev/v4l-subdev#\x00', 0x8, 0x0) r1 = socket(0xf, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(0x0, r1) syz_genetlink_get_family_id$gtp(&(0x7f0000006c40)='gtp\x00', 0xffffffffffffffff) 17:53:25 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:25 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [], 0x10, "319f6a0df8d389"}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r0}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r1 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r1, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:25 executing program 0: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00', r0) syz_open_dev$video4linux(&(0x7f0000000300)='/dev/v4l-subdev#\x00', 0x8, 0x0) r1 = socket(0xf, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(0x0, r1) syz_genetlink_get_family_id$gtp(&(0x7f0000006c40)='gtp\x00', 0xffffffffffffffff) 17:53:25 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002f40)='/dev/vcsa\x00', 0x12400, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:25 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002d40)={0xb4, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8800}, 0x8008) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:25 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:25 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:25 executing program 0: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00', r0) syz_open_dev$video4linux(&(0x7f0000000300)='/dev/v4l-subdev#\x00', 0x8, 0x0) r1 = socket(0xf, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(0x0, r1) syz_genetlink_get_family_id$gtp(&(0x7f0000006c40)='gtp\x00', 0xffffffffffffffff) 17:53:25 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) r4 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x12400, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:25 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:25 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002d40)={0xb4, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8800}, 0x8008) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:25 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [], 0x10, "319f6a0df8d389"}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r0}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r1 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r1, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:25 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:26 executing program 0: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00', r0) syz_open_dev$video4linux(&(0x7f0000000300)='/dev/v4l-subdev#\x00', 0x8, 0x0) socket(0xf, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000340)='wireguard\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(&(0x7f0000006c40)='gtp\x00', 0xffffffffffffffff) 17:53:26 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) r4 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:26 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002d40)={0xb4, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8800}, 0x8008) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:26 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:26 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:26 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{0x0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r0}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r1 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r1, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:26 executing program 0: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00', r0) syz_open_dev$video4linux(&(0x7f0000000300)='/dev/v4l-subdev#\x00', 0x8, 0x0) socket(0xf, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000340)='wireguard\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) 17:53:26 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) r3 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:26 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r0}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:26 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:26 executing program 0: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00', r0) syz_open_dev$video4linux(&(0x7f0000000300)='/dev/v4l-subdev#\x00', 0x8, 0x0) socket(0xf, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000340)='wireguard\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) 17:53:26 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:26 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) r3 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:26 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r0}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:26 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{0x0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r0}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r1 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r1, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:26 executing program 0: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00', r0) syz_open_dev$video4linux(&(0x7f0000000300)='/dev/v4l-subdev#\x00', 0x8, 0x0) socket(0xf, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000340)='wireguard\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) 17:53:26 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:26 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x0, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:26 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) r3 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:26 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x0, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:26 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r0}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:26 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:26 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x0, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:27 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{0x0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r0}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r1 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r1, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:27 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x4004050) 17:53:27 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x0, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:27 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x0, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:27 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}], 0x8) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:27 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002d40)={0xb4, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8800}, 0x8008) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:27 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:27 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:27 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x4004050) 17:53:27 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x0, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:27 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002d40)={0xb4, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8800}, 0x8008) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:27 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}], 0x8) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:27 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:27 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x4004050) 17:53:27 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002d40)={0xb4, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8800}, 0x8008) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:27 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x0, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)) 17:53:27 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:27 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}], 0x8) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:27 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:27 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) r4 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:27 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002d40)={0xb4, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8800}, 0x8008) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:27 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0x0, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:27 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)) syz_io_uring_setup(0x0, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)) 17:53:27 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002d40)={0xb4, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8800}, 0x8008) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:28 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x0, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:28 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0x0, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:28 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) r4 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:28 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:28 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)) 17:53:28 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002d40)={0xb4, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8800}, 0x8008) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:28 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) r4 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:28 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0x0, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:28 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x0, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:28 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) syz_io_uring_setup(0x0, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)) 17:53:28 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002d40)={0xb4, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r0}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8800}, 0x8008) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r0}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:28 executing program 3: getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:28 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) r4 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80), 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:28 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x0, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:28 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x0, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:28 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)) 17:53:28 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002d40)={0xb4, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r0}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8800}, 0x8008) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r0}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:28 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) r4 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80), 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:28 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x0, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:28 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:28 executing program 0: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)) 17:53:28 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002d40)={0xb4, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r0}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8800}, 0x8008) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r0}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:28 executing program 3: getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:28 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x0, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:28 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) r4 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80), 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:29 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:29 executing program 0: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)) 17:53:29 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002d40)={0xb4, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8800}, 0x8008) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:29 executing program 3: getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:29 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0}, 0x4004050) 17:53:29 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x0, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:29 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:29 executing program 0: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)) 17:53:29 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002d40)={0xb4, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8800}, 0x8008) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:29 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0}, 0x4004050) 17:53:29 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x0, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:29 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x0, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:29 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002d40)={0xb4, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8800}, 0x8008) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:29 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000001b00)={0x0, 0x0, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)) 17:53:29 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, &(0x7f00000000c0)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:29 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0}, 0x4004050) 17:53:29 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x0, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:29 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002d40)={0xb4, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8800}, 0x8008) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:29 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x0, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:29 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={0x0}}, 0x4004050) 17:53:29 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)) 17:53:29 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002d40)={0xb4, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8800}, 0x8008) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:29 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:29 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, &(0x7f00000000c0)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:29 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)) 17:53:30 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={0x0}}, 0x4004050) 17:53:30 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x0, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:30 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002d40)={0xb4, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8800}, 0x8008) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:30 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:30 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:30 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000001b00), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)) 17:53:30 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={0x0}}, 0x4004050) 17:53:30 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, &(0x7f00000000c0)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:30 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002d40)={0xb4, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r0}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8800}, 0x8008) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r0}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:30 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:30 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000001b00), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, &(0x7f0000001bc0)) 17:53:30 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) r4 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:30 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:30 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002d40)={0xb4, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r0}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8800}, 0x8008) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r0}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:30 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) r4 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x0, 0x0, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:30 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000001b00), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, &(0x7f0000001bc0)) 17:53:30 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00'}, &(0x7f00000000c0)=0x24) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:30 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:30 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, &(0x7f0000001bc0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:30 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002d40)={0xb4, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r0}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8800}, 0x8008) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r0}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:30 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) r4 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:30 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000001b00), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, &(0x7f0000001bc0)) 17:53:30 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x4, 0x1}, {0x3, 0x1}}], 0x8) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:31 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00'}, &(0x7f00000000c0)=0x24) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:31 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, &(0x7f0000001bc0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:31 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, 0x0, 0x8008) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:31 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) r4 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x80, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x80}}, 0x4004050) 17:53:31 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000001b00), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) 17:53:31 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, 0x0, 0x8008) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:31 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x4, 0x1}, {0x3, 0x1}}], 0x8) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:31 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, &(0x7f0000001bc0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:31 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000001b00), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) 17:53:31 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) r4 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x78, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}]}, 0x78}}, 0x4004050) 17:53:31 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00'}, &(0x7f00000000c0)=0x24) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:31 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, 0x0, 0x8008) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:31 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x4, 0x1}, {0x3, 0x1}}], 0x8) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:31 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:31 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) r4 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x6c, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}]}, 0x6c}}, 0x4004050) 17:53:31 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000001b00), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) 17:53:31 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x8008) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:31 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x46, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e936"}, &(0x7f00000000c0)=0x6a) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:31 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x0, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:31 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:31 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}]}, 0x20}}, 0x4004050) 17:53:31 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:31 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x8008) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:31 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:31 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x0, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:32 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:32 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x14}, 0x14}}, 0x4004050) 17:53:32 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x46, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e936"}, &(0x7f00000000c0)=0x6a) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:32 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x8008) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:32 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x0, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:32 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:32 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x14}, 0x14}}, 0x0) 17:53:32 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:32 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x8008) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:32 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x0, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:32 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x46, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e936"}, &(0x7f00000000c0)=0x6a) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:32 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x0, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:32 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:32 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) 17:53:32 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}}, 0x8008) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:32 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x0, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:32 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x0, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:32 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:32 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x69, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1"}, &(0x7f00000000c0)=0x8d) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:32 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) 17:53:32 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}}, 0x8008) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:32 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x0, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:33 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}}, 0x8008) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:33 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)=0x0) syz_io_uring_submit(0x0, r1, 0x0, 0x5) 17:53:33 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x0, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:33 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) 17:53:33 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x69, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1"}, &(0x7f00000000c0)=0x8d) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:33 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:33 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)=0x0) syz_io_uring_submit(0x0, r1, 0x0, 0x5) 17:53:33 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:33 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x0, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:33 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:33 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)=0x0) syz_io_uring_submit(0x0, r1, 0x0, 0x5) 17:53:33 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x69, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1"}, &(0x7f00000000c0)=0x8d) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:33 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:33 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:33 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:33 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x0, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:33 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:33 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x0, {}, 0x1, 0x8}, 0x5) 17:53:33 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:33 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x7b, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca"}, &(0x7f00000000c0)=0x9f) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:33 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:33 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:34 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x0, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:34 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:34 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x0, {}, 0x1, 0x8}, 0x5) 17:53:34 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x7b, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca"}, &(0x7f00000000c0)=0x9f) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:34 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:34 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:34 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x0, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:34 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:34 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x0, {}, 0x1, 0x8}, 0x5) 17:53:34 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x7b, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca"}, &(0x7f00000000c0)=0x9f) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:34 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:34 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:34 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x0, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:34 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:34 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:34 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x0, 0x8}, 0x5) 17:53:34 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r1, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r2 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:34 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x84, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3c"}, &(0x7f00000000c0)=0xa8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:34 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x0, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:34 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:34 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r1, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r2 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:34 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:34 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x0, 0x8}, 0x5) 17:53:34 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x0, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:34 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x4004050) 17:53:35 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x84, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3c"}, &(0x7f00000000c0)=0xa8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:35 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:35 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r1, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r2 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:35 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x4004050) 17:53:35 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x0, 0x8}, 0x5) 17:53:35 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x0, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:35 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x84, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3c"}, &(0x7f00000000c0)=0xa8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:35 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:35 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, 0x0, &(0x7f0000002d40)) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:35 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1}, 0x5) 17:53:35 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x0, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:35 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x4004050) 17:53:35 executing program 0: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:35 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1}, 0x5) 17:53:35 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x0, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:35 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x88, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c65"}, &(0x7f00000000c0)=0xac) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:35 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:35 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, 0x0, &(0x7f0000002d40)) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:35 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1}, 0x5) 17:53:35 executing program 0: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:35 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x0, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:35 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:36 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, 0x0, &(0x7f0000002d40)) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:36 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x88, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c65"}, &(0x7f00000000c0)=0xac) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:36 executing program 0: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:36 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x0) 17:53:36 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:36 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x0, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:36 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), 0x0) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:36 executing program 0: syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:36 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x88, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c65"}, &(0x7f00000000c0)=0xac) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:36 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80), 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:36 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x0) 17:53:36 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), 0x0) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:36 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x0, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:36 executing program 0: syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:36 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80), 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:36 executing program 5: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), &(0x7f0000001bc0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x0) 17:53:36 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8a, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c5"}, &(0x7f00000000c0)=0xae) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:36 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80), 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:36 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x0, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:36 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), 0x0) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:36 executing program 0: syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:37 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x0, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:37 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x0, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), &(0x7f0000004040)) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r2, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:37 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0}, 0x4004050) 17:53:37 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8a, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c5"}, &(0x7f00000000c0)=0xae) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:37 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:37 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:37 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x0, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), &(0x7f0000004040)) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r2, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:37 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x0, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:37 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0}, 0x4004050) 17:53:37 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8a, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c5"}, &(0x7f00000000c0)=0xae) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:37 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:37 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:37 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x0, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), &(0x7f0000004040)) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r2, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:37 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x0, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:37 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0}, 0x4004050) 17:53:37 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:37 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8b, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51f"}, &(0x7f00000000c0)=0xaf) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:37 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:37 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x0, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r2, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:37 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={0x0}}, 0x4004050) 17:53:37 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x0, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) 17:53:37 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, 0x0, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:38 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:38 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={0x0}}, 0x4004050) 17:53:38 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x0, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r2, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:38 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x0, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) 17:53:38 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8b, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51f"}, &(0x7f00000000c0)=0xaf) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:38 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, 0x0, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:38 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={0x0}}, 0x4004050) 17:53:38 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x0, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r2, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:38 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x0, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') 17:53:38 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:38 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8b, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51f"}, &(0x7f00000000c0)=0xaf) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:38 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:38 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, 0x0, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:38 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x0, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:38 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:38 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x0, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) 17:53:38 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x0, 0x0, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:38 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:38 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:38 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x0, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r1, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r2, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:38 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:38 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x0, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) 17:53:39 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x8c, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}]}, 0x8c}}, 0x4004050) 17:53:39 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:39 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x0, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r1, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r2, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:39 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:39 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x0, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) 17:53:39 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:39 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x80, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x80}}, 0x4004050) 17:53:39 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x0, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r1, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r2, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:39 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:39 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x0, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), &(0x7f0000004040)) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) 17:53:39 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:39 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:39 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x78, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}]}, 0x78}}, 0x4004050) 17:53:39 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x0, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r1, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r2, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:39 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, 0x0, 0x0, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:39 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x78, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}]}, 0x78}}, 0x4004050) 17:53:39 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x0, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), &(0x7f0000004040)) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) 17:53:39 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, &(0x7f0000000140)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:39 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:39 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r1, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r2, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:39 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, 0x0, 0x0, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:39 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x6c, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}]}, 0x6c}}, 0x4004050) 17:53:39 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x0, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), &(0x7f0000004040)) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) 17:53:40 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:40 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, &(0x7f0000000140)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:40 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x6c, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}]}]}, 0x6c}}, 0x4004050) 17:53:40 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r1, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r2, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:40 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, 0x0, 0x0, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:40 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x0, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) 17:53:40 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fff}]}, 0x20}}, 0x4004050) 17:53:40 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:40 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, &(0x7f0000000140)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:40 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x0, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) 17:53:40 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r0, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:40 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}], 0x1, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:40 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x14}, 0x14}}, 0x4004050) 17:53:40 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x0, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:40 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x0, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:40 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x0, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r0, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:40 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x0, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) 17:53:40 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x14}, 0x14}}, 0x0) 17:53:40 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}], 0x1, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:40 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x0, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:40 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x0, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r0, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:40 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x0, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) 17:53:40 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x0, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:40 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x14}, 0x14}}, 0x0) 17:53:40 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}], 0x1, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:41 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x0, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r0, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:41 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x0, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:41 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x0, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) 17:53:41 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x14}, 0x14}}, 0x0) 17:53:41 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {0x0}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:41 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x0, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:41 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r0, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:41 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:41 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x0, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r1, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) 17:53:41 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x14}, 0x14}}, 0x0) 17:53:41 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {0x0}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:41 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r0, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:41 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:41 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x0, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r1, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) 17:53:41 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x0, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:41 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x14}, 0x14}}, 0x0) 17:53:41 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {0x0}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:41 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r0, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:41 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:41 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x0, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r1, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) 17:53:41 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000003080)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0x14}, 0x14}}, 0x0) 17:53:41 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x0, 0x0, 0x3, 0x232}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r0, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:41 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x0, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:42 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e40)=""/4096, 0x1000}], 0x1, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:42 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0x0, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:42 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x0, 0x0, 0x3, 0x232}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r0, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:42 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x0, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r1, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) 17:53:42 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002f00)) 17:53:42 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x0, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:42 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0x0, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:42 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e40)=""/4096, 0x1000}], 0x1, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:42 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:42 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x0, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r1, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) 17:53:42 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x0, 0x0, 0x3, 0x232}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r0, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:42 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x0, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:42 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0x0, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:42 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 17:53:42 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x0, 0x0, 0x0, 0x232}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r0, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:42 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e40)=""/4096, 0x1000}], 0x1, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:42 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x0, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r1, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) 17:53:42 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r0, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:42 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x0, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:42 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) 17:53:42 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 17:53:42 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x0, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:42 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{0x0}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:43 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 17:53:43 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000004040)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:43 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x0, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:43 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r1, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) 17:53:43 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{0x0}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:43 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x0, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:43 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:43 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000004040)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:43 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x0, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:43 executing program 5: socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r0, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) 17:53:43 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{0x0}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:43 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:43 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x0, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:43 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000004040)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:43 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x0, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:43 executing program 5: socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r0, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) 17:53:43 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:43 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:43 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsa\x00', 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:43 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x0, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:43 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x0, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:43 executing program 5: socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r0, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) 17:53:43 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:44 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:44 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, &(0x7f0000002d40)) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r1, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) 17:53:44 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:44 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x0, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:44 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:44 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x0, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:44 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:44 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, 0x0) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r1, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) 17:53:44 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:44 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:44 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x0) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:44 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:44 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:44 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r1, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) 17:53:44 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:44 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:44 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:44 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x0) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:44 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r1, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) 17:53:44 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:44 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:44 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:44 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r1, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) 17:53:45 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:45 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x0) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:45 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:45 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:45 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, 0x0) syz_io_uring_setup(0x2bb1, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r1, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) 17:53:45 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x0, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:45 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:45 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:45 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:45 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, 0x0) syz_io_uring_setup(0x2bb1, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r1, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) 17:53:45 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:45 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x0, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:45 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:45 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:45 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:45 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x0, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:45 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, 0x0) syz_io_uring_setup(0x2bb1, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r1, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) 17:53:45 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x5) 17:53:45 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:45 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:45 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:46 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, 0x0) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x0, 0x0, 0x3, 0x232}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r1, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) 17:53:46 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:46 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x5) 17:53:46 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:46 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:46 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, 0x0) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x0, 0x0, 0x0, 0x232}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r1, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) 17:53:46 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:46 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x5) 17:53:46 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:46 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:46 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, 0x0) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r1, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) 17:53:46 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:46 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:46 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x5) 17:53:46 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:46 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:46 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x0, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:46 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, 0x0) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r1, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) 17:53:46 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x0, {}, 0x1, 0x8}, 0x5) 17:53:46 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{0x0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r0}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r1 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r1, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:46 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:46 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:47 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, 0x0) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000004040)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) 17:53:47 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x0, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:47 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x0, {}, 0x1, 0x8}, 0x5) 17:53:47 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:47 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{0x0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r0}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r1 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r1, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:47 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:47 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, 0x0) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) 17:53:47 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:47 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x0, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:47 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x0, {}, 0x1, 0x8}, 0x5) 17:53:47 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{0x0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r0}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r1 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r1, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:47 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:47 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, 0x0) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) 17:53:47 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:47 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x0, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:47 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x0, 0x8}, 0x5) 17:53:47 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:47 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) r1 = syz_open_procfs$namespace(0x0, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:47 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, 0x0) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) 17:53:47 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000002e40)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:47 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x0, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:47 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x0, 0x8}, 0x5) 17:53:47 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) r1 = syz_open_procfs$namespace(0x0, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:47 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, 0x0) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) 17:53:47 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, 0x0) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) 17:53:48 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:48 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x0, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:48 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x0, 0x8}, 0x5) 17:53:48 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, 0x0) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) 17:53:48 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) r1 = syz_open_procfs$namespace(0x0, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:48 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, 0x0) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) 17:53:48 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x0, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:48 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1}, 0x5) 17:53:48 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, 0x0) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) 17:53:48 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:48 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, 0x0) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) 17:53:48 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:48 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, 0x0) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 17:53:48 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x0, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:48 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1}, 0x5) 17:53:48 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, 0x0) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x0, 0x0) 17:53:48 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:48 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:48 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, 0x0) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 17:53:48 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x0, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:48 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1}, 0x5) 17:53:48 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, 0x0) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x0, 0x0) 17:53:49 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, 0x0) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 17:53:49 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:49 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:49 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:49 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x0) 17:53:49 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, 0x0) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x0, 0x0) 17:53:49 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, 0x0) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) 17:53:49 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:49 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:49 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, 0x0) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 17:53:49 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x0) 17:53:49 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:49 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, 0x0) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) 17:53:49 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:49 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:49 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, 0x0) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 17:53:49 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x0) 17:53:49 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, 0x0) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) 17:53:49 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r0}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r1 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r1, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:49 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) 17:53:49 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000004040)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r2 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:49 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, 0x0) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 17:53:50 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x0) 17:53:50 executing program 2: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) 17:53:50 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r0}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r1 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r1, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:50 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, 0x0) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) 17:53:50 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) 17:53:50 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000004040)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r2 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:50 executing program 2: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) 17:53:50 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, 0x0) 17:53:50 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x0) 17:53:50 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) 17:53:50 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r0}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r1 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r1, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:50 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000004040)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r2 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:50 executing program 2: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) 17:53:50 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, 0x0) 17:53:50 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c40)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x2, {}, 0x1, 0x8}, 0x0) 17:53:50 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:50 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:50 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{0x0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r0}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r1 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r1, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:50 executing program 2: getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, 0x0, 0x0) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) 17:53:50 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, 0x0) 17:53:50 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001900)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) 17:53:50 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:51 executing program 2: getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, 0x0, 0x0) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) 17:53:51 executing program 5: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) 17:53:51 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:51 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) 17:53:51 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{0x0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r0}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r1 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r1, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:51 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:51 executing program 2: getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) 17:53:51 executing program 5: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) 17:53:51 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:51 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x0, 0x0) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) 17:53:51 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{0x0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r0}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r1 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r1, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:51 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), &(0x7f0000004040)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r2 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:51 executing program 5: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) 17:53:51 executing program 2: getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) 17:53:51 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00', 0xffffffffffffffff) syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) 17:53:51 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:51 executing program 5: socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, 0x0, 0x0) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) 17:53:51 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), &(0x7f0000004040)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r2 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:51 executing program 2: getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) 17:53:51 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x0, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:51 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:51 executing program 0: syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) 17:53:51 executing program 5: socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) 17:53:52 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), &(0x7f0000004040)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r2 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:52 executing program 2: getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, 0x0, 0x0) syz_io_uring_setup(0x2bb1, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) 17:53:52 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:52 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x0, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:52 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) 17:53:52 executing program 5: socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) 17:53:52 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, 0x0, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:52 executing program 2: getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, 0x0, 0x0) syz_io_uring_setup(0x2bb1, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) 17:53:52 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:52 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) 17:53:52 executing program 5: socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) 17:53:52 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x0, 0x8, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:52 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, 0x0, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:52 executing program 2: getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, 0x0, 0x0) syz_io_uring_setup(0x2bb1, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) 17:53:52 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:52 executing program 5: socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, 0x0, 0x0) syz_io_uring_setup(0x2bb1, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) 17:53:52 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000001b00)={0x0, 0xe8bb, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) 17:53:52 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, 0x0, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:52 executing program 2: getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, 0x0, 0x0) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) 17:53:52 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:52 executing program 5: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:52 executing program 0: syz_io_uring_setup(0x7821, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) 17:53:52 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x0, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:52 executing program 2: getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, 0x0, 0x0) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) 17:53:52 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:53 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:53 executing program 0: syz_io_uring_setup(0x7821, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) 17:53:53 executing program 5: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:53 executing program 2: getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, 0x0, 0x0) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) 17:53:53 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:53 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:53 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x0, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:53 executing program 0: syz_io_uring_setup(0x7821, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) 17:53:53 executing program 5: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:53 executing program 2: getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, 0x0, 0x0) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x0, 0x0) 17:53:53 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:53 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:53 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x0, 0x44, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:53 executing program 0: syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0x0, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) 17:53:53 executing program 2: getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, 0x0, 0x0) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x0, 0x0) 17:53:53 executing program 5: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) 17:53:53 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:53 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:53 executing program 0: syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0x0, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) 17:53:53 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x0, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:53 executing program 2: getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, 0x0, 0x0) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x0, 0x0) 17:53:53 executing program 5: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) 17:53:54 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:54 executing program 0: syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0x0, 0x8, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) 17:53:54 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:54 executing program 2: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:54 executing program 5: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) 17:53:54 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:54 executing program 0: syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x0, 0x3, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) 17:53:54 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x0, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:54 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:54 executing program 2: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:54 executing program 0: syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x0, 0x0, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) 17:53:54 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:54 executing program 5: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:54 executing program 1: syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:54 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x0, 0x6, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:54 executing program 2: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:54 executing program 0: syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb, 0x0, 0x0, 0x252}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) 17:53:54 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:54 executing program 5: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:54 executing program 1: syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:54 executing program 2: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) 17:53:54 executing program 0: syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001b80), 0x0) 17:53:55 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x0, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:55 executing program 5: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:55 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0x0, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:55 executing program 2: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') 17:53:55 executing program 1: syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:55 executing program 0: syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) 17:53:55 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:55 executing program 5: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:55 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x0, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:55 executing program 2: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) 17:53:55 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x0, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:55 executing program 0: syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) 17:53:55 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:55 executing program 5: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:55 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x0, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:55 executing program 2: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) 17:53:55 executing program 0: syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) 17:53:55 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x0, 0x6, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:55 executing program 5: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:55 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:55 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x0, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:55 executing program 2: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) 17:53:55 executing program 0: syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) 17:53:56 executing program 5: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:56 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x0, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:56 executing program 2: syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) 17:53:56 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:56 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 132.423772][ T3267] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.430386][ T3267] ieee802154 phy1 wpan1: encryption failed: -22 17:53:56 executing program 0: syz_io_uring_setup(0x7821, &(0x7f0000001b00)={0x0, 0xe8bb}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) 17:53:56 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:56 executing program 5: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:56 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) 17:53:56 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:56 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000001b00)={0x0, 0xe8bb}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) 17:53:56 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x0, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:56 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) 17:53:56 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:56 executing program 5: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:56 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718}, 0x4) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:56 executing program 0: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) 17:53:56 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x0, 0x3, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:56 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) 17:53:56 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x0) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:56 executing program 0: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) 17:53:56 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:56 executing program 5: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:56 executing program 2: syz_io_uring_setup(0x2bb1, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) 17:53:57 executing program 0: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) 17:53:57 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x0) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:57 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:57 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x0, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:57 executing program 5: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:57 executing program 2: syz_io_uring_setup(0x2bb1, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) 17:53:57 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000001b00), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) 17:53:57 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:57 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x0) r3 = accept4$vsock_stream(r0, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:57 executing program 5: syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:57 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x0, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:57 executing program 2: syz_io_uring_setup(0x2bb1, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) 17:53:57 executing program 0: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:57 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:57 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:57 executing program 2: syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) 17:53:57 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:57 executing program 0: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:57 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x0, 0x1ff, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:57 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:57 executing program 2: syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) 17:53:57 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:57 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:57 executing program 0: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:58 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:58 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x0, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:58 executing program 2: syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) 17:53:58 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:58 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000040c0)={0x28, 0x0, 0x1fffffffe, @local}, 0x10, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:58 executing program 0: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') 17:53:58 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, 0x0, 0x0, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:58 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:58 executing program 2: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:58 executing program 5: syz_io_uring_setup(0x2bb1, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:58 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x0, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) 17:53:58 executing program 0: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) 17:53:58 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002cc0)=[{{0x3, 0x1, 0x1}, {0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1}}], 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000002d00), &(0x7f0000002d40)=0x4) recvmsg$can_raw(r0, &(0x7f0000003f40)={&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002e00)=""/41, 0x29}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003e80)=""/184, 0xb8}, 0x40000000) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80)={0x0, 0x10fb, 0x0, 0x3, 0x232, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000)=0x0, &(0x7f0000004040)) syz_io_uring_submit(r2, 0x0, &(0x7f0000004080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x0, 0x2718, 0x0, 0x1}, 0x4) r3 = accept4$vsock_stream(r0, 0x0, 0x0, 0x800) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000004100)={0x0, @rc={0x1f, @any, 0x7}, @ipx={0x4, 0x800, 0x7ff, "2895a2a6988d", 0x5}, @nfc={0x27, 0x1, 0x2, 0x4}, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1fc000000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000041c0)={0x6, 0x7, {0x55, 0x0, 0x24f, {0x3, 0xff}, {0xe3c7, 0x8d05}, @rumble={0x4, 0x5}}, {0x53, 0x7, 0x8, {0x1, 0xaeb0}, {0x1f, 0x9}, @cond=[{0x4, 0x3, 0x5, 0x3, 0x4702, 0x5}, {0x20c, 0x40, 0x0, 0x400, 0x1, 0x1f}]}}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000004340)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000050) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:58 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:58 executing program 2: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:58 executing program 0: socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) 17:53:58 executing program 5: syz_io_uring_setup(0x2bb1, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17:53:58 executing program 3: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x8c, "68a21122e510cd3985bcb82609d798f632c596db8d223963ea60e2025efd1c31330c72754efddd0dc1edae79cea9217f90a0b2396a52f7ad24e8702f2a7616c23b6af015e9365e0972a22e390dcb76662ba2c9da480f55452382974536938b1b8ee93856906845b1f1b2b7d495ba6b948f6311dc6e836c64827aca995b290a413fb73e3cc64d2c6500c51fb4"}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffffc, 0x1, 0x0, 0x4, 0x2, 0x100}, &(0x7f0000000140)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000180)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "319f6a0df8d389"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{r0, 0x1ec5, 0x8, 0x44, 0x6, 0x6, 0x3, 0x0, 0x0, 0x6e6294b5, 0xff, 0x3b, 0x2, 0x4, 0x9}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001240)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x6, 0xa, 0xa6965c969660ad04, 0x20, 0x67}, {0x81, 0xf78, 0x3, 0x9, 0x0, 0xff, 0x2, 0x2}, {0x20, 0x400, 0x5, 0x2}, 0x3, 0x6e6bb4, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x2, @in6=@remote, 0x0, 0x3, 0x3, 0x7f, 0x4, 0x8, 0x2}}, 0xe8) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x14, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001480)={'raw\x00'}, &(0x7f0000001500)=0x54) r2 = socket$inet6(0xa, 0x1, 0xff) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000001540)={'nat\x00'}, &(0x7f00000015c0)=0x54) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcsa\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000002100)={{0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, {0xa, 0x4e21, 0x3, @ipv4={[], [], @broadcast}, 0x9}, 0xfffa, [0x9, 0x3, 0x200, 0x6, 0x2, 0x4, 0xffffffff]}, 0x5c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002180), &(0x7f00000021c0)=0x4) [ 135.105868][T13236] ================================================================== [ 135.113972][T13236] BUG: KASAN: use-after-free in __lock_acquire+0x3e6f/0x54c0 [ 135.121733][T13236] Read of size 8 at addr ffff88804d6440d0 by task syz-executor.1/13236 [ 135.130045][T13236] [ 135.132388][T13236] CPU: 0 PID: 13236 Comm: syz-executor.1 Not tainted 5.11.0-next-20210224-syzkaller #0 [ 135.142039][T13236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 135.152259][T13236] Call Trace: [ 135.155560][T13236] dump_stack+0xfa/0x151 [ 135.159840][T13236] ? __lock_acquire+0x3e6f/0x54c0 [ 135.164911][T13236] print_address_description.constprop.0.cold+0x5b/0x2f8 [ 135.171980][T13236] ? __lock_acquire+0x3e6f/0x54c0 [ 135.177039][T13236] ? __lock_acquire+0x3e6f/0x54c0 [ 135.182079][T13236] kasan_report.cold+0x7c/0xd8 [ 135.186898][T13236] ? __lock_acquire+0x3e6f/0x54c0 [ 135.191963][T13236] __lock_acquire+0x3e6f/0x54c0 [ 135.196841][T13236] ? lock_acquire+0x1bb/0x730 [ 135.201534][T13236] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 135.207548][T13236] lock_acquire+0x1ab/0x730 [ 135.212513][T13236] ? try_to_wake_up+0x98/0x14a0 [ 135.217405][T13236] ? lock_release+0x710/0x710 [ 135.222358][T13236] ? lock_downgrade+0x6d0/0x6d0 [ 135.227222][T13236] ? __cpuhp_state_remove_instance+0x15e/0x5b0 [ 135.233410][T13236] ? lock_is_held_type+0xd5/0x130 [ 135.238457][T13236] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 135.243852][T13236] _raw_spin_lock_irqsave+0x39/0x50 [ 135.249244][T13236] ? try_to_wake_up+0x98/0x14a0 [ 135.254203][T13236] try_to_wake_up+0x98/0x14a0 [ 135.258936][T13236] ? migrate_swap_stop+0x9f0/0x9f0 [ 135.264160][T13236] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 135.270421][T13236] ? __cpuhp_state_remove_instance+0x3de/0x5b0 [ 135.276599][T13236] io_wq_destroy+0x74/0x3d0 [ 135.281130][T13236] __io_uring_files_cancel+0x195/0x230 [ 135.286608][T13236] ? __io_uring_free+0xc0/0xc0 [ 135.291409][T13236] ? _raw_spin_unlock_irqrestore+0x28/0x50 [ 135.297252][T13236] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 135.303528][T13236] ? __validate_process_creds+0x20c/0x370 [ 135.309267][T13236] do_exit+0x299/0x2a60 [ 135.313445][T13236] ? lock_is_held_type+0xd5/0x130 [ 135.318491][T13236] ? find_held_lock+0x2d/0x110 [ 135.323449][T13236] ? mm_update_next_owner+0x7a0/0x7a0 [ 135.328846][T13236] ? lock_release+0x3bb/0x710 [ 135.333738][T13236] ? get_signal+0x337/0x2100 [ 135.338344][T13236] ? lock_downgrade+0x6d0/0x6d0 [ 135.343222][T13236] ? lock_is_held_type+0xd5/0x130 [ 135.348274][T13236] do_group_exit+0x125/0x310 [ 135.352885][T13236] get_signal+0x42c/0x2100 [ 135.357310][T13236] ? futex_exit_release+0x220/0x220 [ 135.362528][T13236] arch_do_signal_or_restart+0x2a8/0x1eb0 [ 135.368271][T13236] ? debug_object_init_on_stack+0x20/0x20 [ 135.374013][T13236] ? kmem_cache_free+0x62c/0x730 [ 135.379005][T13236] ? __dentry_kill+0x4a3/0x640 [ 135.384239][T13236] ? copy_siginfo_to_user32+0xa0/0xa0 [ 135.389728][T13236] ? __do_sys_futex+0x2a2/0x470 [ 135.394593][T13236] ? __do_sys_futex+0x2ab/0x470 [ 135.399464][T13236] ? do_futex+0x1710/0x1710 [ 135.403997][T13236] exit_to_user_mode_prepare+0x148/0x250 [ 135.409653][T13236] syscall_exit_to_user_mode+0x19/0x50 [ 135.415147][T13236] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 135.421088][T13236] RIP: 0033:0x465ef9 [ 135.424999][T13236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 135.444797][T13236] RSP: 002b:00007fe2c77f5218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 135.453243][T13236] RAX: 0000000000000001 RBX: 000000000056bf68 RCX: 0000000000465ef9 [ 135.461234][T13236] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 000000000056bf6c [ 135.469397][T13236] RBP: 000000000056bf60 R08: 000000000000000e R09: 0000000000000000 [ 135.477385][T13236] R10: 0000000000000008 R11: 0000000000000246 R12: 000000000056bf6c [ 135.485367][T13236] R13: 00007fff1bc74b2f R14: 00007fe2c77f5300 R15: 0000000000022000 [ 135.493363][T13236] [ 135.495689][T13236] Allocated by task 13236: [ 135.500102][T13236] kasan_save_stack+0x1b/0x40 [ 135.504800][T13236] __kasan_slab_alloc+0x75/0x90 [ 135.509656][T13236] kmem_cache_alloc_node+0x16d/0x3c0 [ 135.515044][T13236] copy_process+0x613/0x6fd0 [ 135.519651][T13236] kernel_clone+0xe7/0xab0 [ 135.524366][T13236] io_wq_fork_thread+0xa7/0xe0 [ 135.529146][T13236] io_wq_create+0x81c/0xab0 [ 135.533683][T13236] io_uring_alloc_task_context+0x185/0x510 [ 135.539591][T13236] io_uring_add_task_file+0x261/0x350 [ 135.544976][T13236] io_uring_setup+0x14c7/0x2c20 [ 135.549849][T13236] do_syscall_64+0x2d/0x70 [ 135.554277][T13236] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 135.560184][T13236] [ 135.562509][T13236] Freed by task 13237: [ 135.566594][T13236] kasan_save_stack+0x1b/0x40 [ 135.571284][T13236] kasan_set_track+0x1c/0x30 [ 135.575882][T13236] kasan_set_free_info+0x20/0x30 [ 135.580830][T13236] __kasan_slab_free+0xf5/0x130 [ 135.585688][T13236] slab_free_freelist_hook+0x72/0x1b0 [ 135.591109][T13236] kmem_cache_free+0x8b/0x730 [ 135.595884][T13236] __put_task_struct+0x267/0x3f0 [ 135.600834][T13236] delayed_put_task_struct+0x1f6/0x340 [ 135.606395][T13236] rcu_core+0x722/0x1280 [ 135.610651][T13236] __do_softirq+0x29b/0x9f6 [ 135.615168][T13236] [ 135.618030][T13236] Last potentially related work creation: [ 135.623741][T13236] kasan_save_stack+0x1b/0x40 [ 135.628440][T13236] kasan_record_aux_stack+0xe5/0x110 [ 135.633741][T13236] call_rcu+0xb1/0x700 [ 135.637824][T13236] put_task_struct_rcu_user+0x7f/0xb0 [ 135.643230][T13236] schedule_tail+0x7/0xd0 [ 135.647664][T13236] ret_from_fork+0x8/0x30 [ 135.652014][T13236] [ 135.654457][T13236] Second to last potentially related work creation: [ 135.661226][T13236] kasan_save_stack+0x1b/0x40 [ 135.665939][T13236] kasan_record_aux_stack+0xe5/0x110 [ 135.671246][T13236] call_rcu+0xb1/0x700 [ 135.675349][T13236] put_task_struct_rcu_user+0x7f/0xb0 [ 135.680744][T13236] __schedule+0x914/0x21a0 [ 135.685179][T13236] preempt_schedule_irq+0x4e/0x90 [ 135.690224][T13236] irqentry_exit+0x7a/0xa0 [ 135.694657][T13236] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 135.700653][T13236] [ 135.702979][T13236] The buggy address belongs to the object at ffff88804d643800 [ 135.702979][T13236] which belongs to the cache task_struct of size 6912 [ 135.717136][T13236] The buggy address is located 2256 bytes inside of [ 135.717136][T13236] 6912-byte region [ffff88804d643800, ffff88804d645300) [ 135.730602][T13236] The buggy address belongs to the page: [ 135.736258][T13236] page:00000000d79dc6ea refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4d640 [ 135.746538][T13236] head:00000000d79dc6ea order:3 compound_mapcount:0 compound_pincount:0 [ 135.754874][T13236] flags: 0xfff00000010200(slab|head) [ 135.760270][T13236] raw: 00fff00000010200 0000000000000000 0000000100000001 ffff888140004000 [ 135.768871][T13236] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 135.777461][T13236] page dumped because: kasan: bad access detected [ 135.784859][T13236] [ 135.787536][T13236] Memory state around the buggy address: [ 135.793190][T13236] ffff88804d643f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 135.801260][T13236] ffff88804d644000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 135.809850][T13236] >ffff88804d644080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 135.817913][T13236] ^ [ 135.825810][T13236] ffff88804d644100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 135.833886][T13236] ffff88804d644180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 135.842040][T13236] ================================================================== [ 135.850104][T13236] Disabling lock debugging due to kernel taint [ 135.856357][T13236] Kernel panic - not syncing: panic_on_warn set ... [ 135.863034][T13236] CPU: 0 PID: 13236 Comm: syz-executor.1 Tainted: G B 5.11.0-next-20210224-syzkaller #0 [ 135.874069][T13236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 135.884131][T13236] Call Trace: [ 135.887414][T13236] dump_stack+0xfa/0x151 [ 135.891674][T13236] panic+0x306/0x73d [ 135.895583][T13236] ? __warn_printk+0xf3/0xf3 [ 135.900193][T13236] ? __lock_acquire+0x3e6f/0x54c0 [ 135.905229][T13236] ? __lock_acquire+0x3e6f/0x54c0 [ 135.910263][T13236] ? __lock_acquire+0x3e6f/0x54c0 [ 135.915298][T13236] end_report.cold+0x5a/0x5a [ 135.919929][T13236] kasan_report.cold+0x6a/0xd8 [ 135.924712][T13236] ? __lock_acquire+0x3e6f/0x54c0 [ 135.929770][T13236] __lock_acquire+0x3e6f/0x54c0 [ 135.934640][T13236] ? lock_acquire+0x1bb/0x730 [ 135.939349][T13236] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 135.945345][T13236] lock_acquire+0x1ab/0x730 [ 135.949860][T13236] ? try_to_wake_up+0x98/0x14a0 [ 135.954729][T13236] ? lock_release+0x710/0x710 17:53:59 executing program 0: syz_io_uring_setup(0x2bb1, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) 17:53:59 executing program 5: syz_io_uring_setup(0x2bb1, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000004180)='/dev/uinput\x00', 0x802, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000004280)='ns/mnt\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 135.959426][T13236] ? lock_downgrade+0x6d0/0x6d0 [ 135.964293][T13236] ? __cpuhp_state_remove_instance+0x15e/0x5b0 [ 135.970464][T13236] ? lock_is_held_type+0xd5/0x130 [ 135.975511][T13236] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 135.981081][T13236] _raw_spin_lock_irqsave+0x39/0x50 [ 135.986300][T13236] ? try_to_wake_up+0x98/0x14a0 [ 135.991176][T13236] try_to_wake_up+0x98/0x14a0 [ 135.995876][T13236] ? migrate_swap_stop+0x9f0/0x9f0 [ 136.001154][T13236] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 17:53:59 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) [ 136.007416][T13236] ? __cpuhp_state_remove_instance+0x3de/0x5b0 [ 136.013591][T13236] io_wq_destroy+0x74/0x3d0 [ 136.018129][T13236] __io_uring_files_cancel+0x195/0x230 [ 136.023634][T13236] ? __io_uring_free+0xc0/0xc0 [ 136.028415][T13236] ? _raw_spin_unlock_irqrestore+0x28/0x50 [ 136.034339][T13236] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 136.040716][T13236] ? __validate_process_creds+0x20c/0x370 [ 136.046997][T13236] do_exit+0x299/0x2a60 [ 136.051183][T13236] ? lock_is_held_type+0xd5/0x130 17:53:59 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) [ 136.056248][T13236] ? find_held_lock+0x2d/0x110 [ 136.061025][T13236] ? mm_update_next_owner+0x7a0/0x7a0 [ 136.066419][T13236] ? lock_release+0x3bb/0x710 [ 136.073239][T13236] ? get_signal+0x337/0x2100 [ 136.077845][T13236] ? lock_downgrade+0x6d0/0x6d0 [ 136.082799][T13236] ? lock_is_held_type+0xd5/0x130 [ 136.087866][T13236] do_group_exit+0x125/0x310 [ 136.092478][T13236] get_signal+0x42c/0x2100 [ 136.096913][T13236] ? futex_exit_release+0x220/0x220 [ 136.102165][T13236] arch_do_signal_or_restart+0x2a8/0x1eb0 [ 136.107904][T13236] ? debug_object_init_on_stack+0x20/0x20 [ 136.113854][T13236] ? kmem_cache_free+0x62c/0x730 [ 136.119196][T13236] ? __dentry_kill+0x4a3/0x640 [ 136.123981][T13236] ? copy_siginfo_to_user32+0xa0/0xa0 [ 136.129376][T13236] ? __do_sys_futex+0x2a2/0x470 [ 136.134244][T13236] ? __do_sys_futex+0x2ab/0x470 [ 136.139131][T13236] ? do_futex+0x1710/0x1710 [ 136.143651][T13236] exit_to_user_mode_prepare+0x148/0x250 [ 136.149322][T13236] syscall_exit_to_user_mode+0x19/0x50 17:53:59 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000003f80), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000), 0x0) [ 136.154805][T13236] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 136.160973][T13236] RIP: 0033:0x465ef9 [ 136.164868][T13236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 136.184863][T13236] RSP: 002b:00007fe2c77f5218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 136.193298][T13236] RAX: 0000000000000001 RBX: 000000000056bf68 RCX: 0000000000465ef9 [ 136.201285][T13236] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 000000000056bf6c [ 136.209277][T13236] RBP: 000000000056bf60 R08: 000000000000000e R09: 0000000000000000 [ 136.217267][T13236] R10: 0000000000000008 R11: 0000000000000246 R12: 000000000056bf6c [ 136.225254][T13236] R13: 00007fff1bc74b2f R14: 00007fe2c77f5300 R15: 0000000000022000 [ 136.233992][T13236] Kernel Offset: disabled [ 136.238347][T13236] Rebooting in 86400 seconds..