Warning: Permanently added '[localhost]:32107' (ECDSA) to the list of known hosts. 2022/10/02 15:28:22 fuzzer started 2022/10/02 15:28:23 dialing manager at localhost:35095 syzkaller login: [ 44.703712] cgroup: Unknown subsys name 'net' [ 44.818923] cgroup: Unknown subsys name 'rlimit' 2022/10/02 15:28:37 syscalls: 207 2022/10/02 15:28:37 code coverage: enabled 2022/10/02 15:28:37 comparison tracing: enabled 2022/10/02 15:28:37 extra coverage: enabled 2022/10/02 15:28:37 setuid sandbox: enabled 2022/10/02 15:28:37 namespace sandbox: enabled 2022/10/02 15:28:37 Android sandbox: enabled 2022/10/02 15:28:37 fault injection: enabled 2022/10/02 15:28:37 leak checking: enabled 2022/10/02 15:28:37 net packet injection: enabled 2022/10/02 15:28:37 net device setup: enabled 2022/10/02 15:28:37 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/02 15:28:37 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/02 15:28:37 USB emulation: enabled 2022/10/02 15:28:37 hci packet injection: enabled 2022/10/02 15:28:37 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/02 15:28:37 802.15.4 emulation: enabled 2022/10/02 15:28:37 fetching corpus: 0, signal 0/0 (executing program) 2022/10/02 15:28:37 starting 8 fuzzer processes 15:28:37 executing program 1: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"d4c0cadc7862c32b72c9fd760c05ca23", 0x0, 0x0, {0x0, 0x8}, {0x3ff}, 0x1000, [0x6, 0x9, 0x100000000, 0x35e3, 0x200, 0x2, 0xffffffffffff7fff, 0x10000, 0x8, 0x4, 0xff, 0x7049b48f, 0xfff, 0xffffffffffffff01, 0x7, 0x10000]}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3}, 0x1) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"87ccb543c14d08e63a7b0ba432b0a614", r0, r0, {0x7, 0xffffffff}, {0x5, 0x333e}, 0x8, [0x0, 0x4, 0x10001, 0x6, 0x800, 0x3, 0x7, 0x5d, 0x16b7, 0x9, 0x8d76, 0xfffffffffffffff9, 0x0, 0x4, 0x80, 0x5]}) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14, 0x80000) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@ipv4={'\x00', '\xff\xff', @empty}, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5, 0x0, 0x401, 0x100, 0x2, 0x40000040, r2}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@rand_addr=' \x01\x00', @mcast1, @loopback, 0x8, 0x3, 0x5, 0x0, 0x3, 0x0, r2}) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000003c0), 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_DEL_MFC(r4, 0x29, 0xcd, &(0x7f0000000440)={{0xa, 0x4e20, 0x1ff, @local, 0xb07f}, {0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffffffff}, 0x7f, [0x8, 0xfffff801, 0x5, 0xef, 0x7fffffff, 0x581, 0x2, 0xc6b5]}, 0x5c) r5 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_tcp_int(r5, 0x6, 0x4, &(0x7f00000004c0)=0x1, 0x4) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000500)={@local, @remote, @ipv4={'\x00', '\xff\xff', @remote}, 0x5, 0x6, 0xc4, 0x400, 0xffff, 0xa4, r2}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000580)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000000b00)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000600)={0x4b4, 0x13, 0x100, 0x70bd28, 0x25dfdbfe, {0x12, 0x1, 0x2, 0x20, {0x4e23, 0x4e21, [0x1ff, 0x6, 0x83, 0x9], [0x4, 0x400, 0x0, 0x1000], r2, [0x0, 0x7d70dae6]}, 0x20000000, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x98, 0x1, "059b6a667558d3c66dcf091a25471766a25b0cac36aca9a4484e9cf401819e296006c7f789ff62840ca516b9d2b290b8f16d8bec76ec6ac61f77e08ec20bb666a50c0cff81d4c90cd0f45dd00df1748717a64fc96306753dda1a1690d6627aa8bdb85291d11f65631909ed0d9ed5cfb8427d1be0fa9894541309819413fcd530ee4df011dc66387e4914493cf585024d169d8e6f"}, @INET_DIAG_REQ_BYTECODE={0x13, 0x1, "dc71715d25ba6ee08beeddda723dfc"}, @INET_DIAG_REQ_BYTECODE={0xcd, 0x1, "49add60b18e0036c0a16eaf44a81abdb4e83421fb342bdf32d55ea02922c16d837b1f662fadad3afb9280c940af20c1ed5998cb3bfc2b8a1d31b6c79a464e6a88709186dbe1a4895d6222dec8a020816fa710235be1f8b1864b2c79e751b428d9d436f0e38b698deb468eb3ffdb7f43c819480879640233f63742e7104cd75e0784cec9db1be334ce53faa052c5e196964b6279bf0d27f70e2869c6bba9755305d5f6f1658460001f8f40e006f69f198bace92546de1d325b71ad679e02838afc66b6cae2237a10126"}, @INET_DIAG_REQ_BYTECODE={0xb8, 0x1, "24a43a7172daa0a345e28865db7af0d7898b92bbadd1c7d6b8eaa6f8a05795a8ecf9f7d29640c57e09379e74e26e83a82c285fca9fdaf29b4f4aae5457914a8782439e65c710b1105e81944504464bbee0abc77d38d56c5c830c1e3e14fa725f50551e0f2aa47c82a2ae0a548b040f0b993cd0c03932296826466e0e20a25e825fa34febdfb68c70a0bdd4857248b449d14c7dfa5081257e27fb0ed8841595203227e8b9a9edf6dfa6e71cd4ecc481a48b44fed9"}, @INET_DIAG_REQ_BYTECODE={0xf3, 0x1, "9f72c4ce3bf66789cc8bf81aafe5763da16a6419845ecdd391d034940dc78785af0c6264c1e6e935f8c9d58cb11ac66ec7fd2825b780583b16da3e8a1a8b786e05b7ca7b62c66210cd326337219a250dccc4580ae7326c1612c65ee9c70b69655969f39e86a63e2f979fba2ea591e389df04c8ae490a2f039f469bf9473abbe351b505b9d1fe51e9e0b25b71fa58ff69549b62f6671940c4c1ba46c2a84564728b16d9174220eecef8b88e153ca5dacd20687a0a8075ad66f2ac7ea01790fbccbee7c6fc6134c5071d5baf170d9ca622eaa3f34e4a27cc0d7a5b04bfb9f97ab6a7c9cff4f49097548f9cad923f18ac"}, @INET_DIAG_REQ_BYTECODE={0x2f, 0x1, "6e57e41e4bb384c0a698cef4b0dfdfd1a07924d0b199ab872feb015c181629b5e47e71a13949136345bb98"}, @INET_DIAG_REQ_BYTECODE={0x9e, 0x1, "593ed5c78e541f262c3a4c4e817da74e842da407028b248fce2e5a07fbdf1af402edbc9d717eae59eeed9c77bc98f0423eaefc6be3226b6e7f65b8d1f0b7245196233daeb7306837eeef01c5248af4b6049d9eaef7002fa789d797df73319fe2c4fd95f3b47dcd6df2d6b9ca962df181c4bc568fd49312fb7fac088dd004ab8cbe7a363394e666ee28edd76791c9efccac8089a58956ebf59081"}, @INET_DIAG_REQ_BYTECODE={0x70, 0x1, "6ea43988ed441e20c79941a15549a58d5d24d1bd36a1b35de7547742353ed6cc6b6a73426bb5cf187a0ffbac0f1ab2d43b5fd1c77219efc224cabafa0bdd107cc376f449f02f066354a3237fb4eeea6adc4ae50ae4c214ae755a0f7cbb75ab1587cd5c81efd6830302901edc"}]}, 0x4b4}, 0x1, 0x0, 0x0, 0x20000000}, 0x8800) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f0000000b40)={0x1}, 0x4) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r6, 0x89fa, &(0x7f0000000c00)={'ip6gre0\x00', &(0x7f0000000b80)={'syztnl0\x00', r2, 0x4, 0x6, 0x3, 0x8000, 0x2, @loopback, @mcast1, 0x7, 0x40, 0x9, 0x200}}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000c40)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000c80)={0x3b, 0xd, '\x00', [@enc_lim={0x4, 0x1, 0x7f}, @ra={0x5, 0x2, 0x7f}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x2, 0xc, 0x7f, 0x4, [0x2, 0x3, 0xffffffffffff896e, 0x3, 0xf17, 0x400]}}, @ra={0x5, 0x2, 0x1}, @jumbo={0xc2, 0x4, 0x4}, @enc_lim, @jumbo={0xc2, 0x4, 0x2d}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, 0x78) 15:28:37 executing program 4: r0 = socket(0x28, 0x800, 0x68770a22) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000080)={0x3f, {{0xa, 0x4e20, 0x1c9e, @remote, 0x7}}}, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000140)={'raw\x00', 0x2, [{}, {}]}, 0x48) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x90001, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000200)={'mangle\x00', 0x3, [{}, {}, {}]}, 0x58) r3 = socket(0x22, 0x5, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000280)=0x4, 0x4) r4 = socket(0x22, 0x2, 0xb0) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f00000002c0)={0x1}, 0x4) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/custom1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000480)={0x1c, 0x0, &(0x7f0000000340)=[@clear_death={0x400c630f, 0x2}, @exit_looper, @increfs={0x40046304, 0x3}], 0xc8, 0x0, &(0x7f0000000380)="945a2582e97415526fcffb6e6ffc35829949b698c3ab57af9a20f64c973221b872f70463e96f9459c9dc1a30c8fe2fcedd4c36b65debe6c3eaccc3b81ff761ff0b1fd2ebecc5ff0af654bcfcc2cf0e00025660a75887f400e42c45b0439f8d01542f5794e90ae9dde422c38e6b61b79ffe7c8a7b1be9a30f902d3fa6bb4907a4668dce3fd1165d0b5dc275f5f01f470c7c6a746b18dddc84bf4b89b00ddb68d4e9fe77f60f17a7f1422d8feb01ca02b59447c5bce41060d28dae608fad37fbd9942b955be74daca8"}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000005c0)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/156, 0x9c, 0x1, &(0x7f0000000580)=""/35, 0x23}, &(0x7f0000000600)=0x40) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000640)={0x80000001, {{0xa, 0x4e21, 0x10000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x200}}}, 0x88) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index=0x4, 0x0, 0x0, 0x6, 0x0, 0x0, {0x0, 0x0, r4}}, 0x80) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r6, 0x29, 0xcd, &(0x7f0000000740)={{0xa, 0x4e24, 0x2, @local, 0x3}, {0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x6, [0x6, 0x6, 0x8, 0x2, 0x23a9, 0x81, 0x27d1, 0xfffffffe]}, 0x5c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000840)={'ip6gre0\x00', &(0x7f00000007c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x6, 0x1, 0x3f, @mcast1, @empty, 0x7800, 0x80, 0x1, 0xd19a}}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000880)={@local, 0x1c, r7}) 15:28:38 executing program 3: setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)="c65ef990d11decc0721c9d23adce23f2c5eaa9cb65ae5ae3c1b9bb150ef68b31fbd3b3e950361d1ff2c329b263451b4d8891d97bc330167d8cd12eb0883839947c1d9a3d71c912fff313a3f3e481b8ffac12036438e4c9cd290e3168453e8459ba7aeee2f99d868ea3baec243651802dfca38e9231379458c48a4d6e49e5f761ac3918733aa2b9af86bc637bd4fb2453177da61394a0f4e28a85d46f9fd8ca53340f948cae06c2520ca7b9e13628b6e0d05b08205dd3d87b4a19ecd4a1bb0e0ca067aa9281b8c6", 0xc7) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000100)=""/132, &(0x7f00000001c0)=0x84) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000200)=""/42, &(0x7f0000000240)=0x2a) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000280)='reno\x00', 0x5) mq_getsetattr(0xffffffffffffffff, &(0x7f00000002c0)={0x8, 0xfffffffffffff68f, 0x7, 0xcc0f}, &(0x7f0000000300)) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000340)={0xdb5, 0x101, 0x401, 0x4}) r0 = syz_open_dev$loop(&(0x7f0000000380), 0x7, 0x80) io_cancel(0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x4, r0, &(0x7f00000003c0)="681b7397c305ba7ff3a311755ce6ca5d719de0f425eeca6c9c6839d11d9127a9f10e733776f6d1153a2db8d503c2bfbb9948c48e2ad0b3be8fd30b4846e3201a5e23e976d5075f7ef1f726e9dd01dd8d308c1b3f78d1ff1f1cbed5d5cbd4501224b19ae30464bb5191a1a160fc19636907c2ac4a076dc6a8f674b3645888c413d514bc24ab007cab90c7790674dcb4a309571df6917ba8453bd9ce9575e2b27b0cea4b9b552075042fb79ba19d7a415ea89b10", 0xb3, 0xfff, 0x0, 0x1}, &(0x7f00000004c0)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000540)) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000580)={{0x0, 0x100000001, 0xffffffff00000000, 0x5, 0x2, 0x3, 0x8, 0x6, 0x1f, 0x0, 0x2, 0x3ff, 0x3, 0x0, 0x1}}) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000001580)) socketpair(0x29, 0x5, 0x2, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000001600)={0x9, 0x8, 0x8, 0x3, 0x80000000}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000001640)={{{@in=@dev, @in6=@mcast2}}, {{@in6=@private1}, 0x0, @in=@multicast2}}, &(0x7f0000001740)=0xe8) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001780)={"465f0d9654dd829cc68b3244e2fc4a50", 0x0, 0x0, {0xd78, 0xffffffff}, {0x9, 0x3}, 0x0, [0x4, 0x3c63, 0x4, 0x1, 0x9, 0x80000000, 0x7f, 0x1, 0x7ff, 0x4, 0x3, 0x7ff, 0x8, 0x100000000, 0x8000, 0x5]}) r3 = socket(0x1a, 0x4, 0x401) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000001880), 0x4) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000018c0), 0x105200, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000001900)={0x9, 0xfffffff8, 0x6, 0x200, 0x2f18}, 0x14) 15:28:38 executing program 7: setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)={0x5e, 0x2, 0x1, 0x3, 0x0, [@dev={0xfe, 0x80, '\x00', 0x10}]}, 0x18) r0 = syz_io_uring_complete(0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14, 0x80800) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000000c0)={@local, r1}, 0x14) getsockname$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000140)=0x1c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4) r4 = socket(0x21, 0x4, 0x401) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f00000002c0)={0x1, {{0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}}}, 0x88) setsockopt$inet6_buf(r4, 0x29, 0xdb, &(0x7f0000000380)="e0b164be7942560e0ef6298eb798f9af0f7faad8459c120e15db44d6355d096b94333aad7459675c54de1aaaf09bf6ab0a8955d07cf9ad8d84a32817ac2d75aec9959d9a7714c633a1ace7fe3079c4e413dd7d8e4adeaa2a96e5b0ef522f", 0x5e) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000500)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000540)={@private2={0xfc, 0x2, '\x00', 0x1}, r5}, 0x14) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8}, 0x20002800) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000006c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x29, 0x2d, &(0x7f0000000800)={0x0, {{0xa, 0x4e22, 0x80, @remote, 0x54a58250}}}, 0x88) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000ac0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a80)={&(0x7f0000000900)={0x148, 0x13, 0x1, 0x70bd26, 0x25dfdbff, {0x5, 0x60, 0xf4, 0xd6, {0x4e22, 0x4e21, [0x6, 0x5, 0x5, 0x4], [0x401, 0x800, 0xd0b, 0x4780ac06], 0x0, [0x6, 0x1f]}, 0x4, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x81, 0x1, "ac3c6c9807a01910bef05b51585092ca051702e63fb24c836e08b86e5f63cd32a73299862b0608b52b8c03f5a348656dca60350e75e6a81533358395de6ee1333ab8a1426e058d09d4d21f71eeeffbe3b47b6cc998f529647ab76faaaec3de4b0a89b7f96a84cfbf3fa0ba2d7b18dc1e939d5ee83bc79181144c3d13b5"}, @INET_DIAG_REQ_BYTECODE={0x75, 0x1, "31d5fbd06ea3a7f821defa49fa6a4d8b7e9f2d097b5ed55043216ed4ea4b1558da8ec748a8f9d6ded8dc061e9419ba8f18e5642877cfca5520b72b17f0c7ead97af28baa7b96e6181016dd3eefe52ade56d88d64462803e51639a134ec3fca447bb3a986c58fed7b57dc24a4e7286a0c8f"}]}, 0x148}, 0x1, 0x0, 0x0, 0x40000}, 0x41) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000b00)=[@mss={0x2, 0x4}, @timestamp, @window={0x3, 0x401}, @window={0x3, 0x1, 0xc35f}], 0x4) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x38, r3, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x38}}, 0x0) [ 59.055526] audit: type=1400 audit(1664724518.039:6): avc: denied { execmem } for pid=287 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 15:28:38 executing program 5: ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000000)={0x0, 0x1ff, 0x8798}) mq_timedsend(0xffffffffffffffff, &(0x7f0000000040)="48f82bdea935cfba16267b6f7306e05a79674cd19b67f551", 0x18, 0x6, &(0x7f0000000080)={0x0, 0x989680}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) syz_io_uring_setup(0x20f, &(0x7f0000000100)={0x0, 0xc87d, 0x20, 0x2, 0x52, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) write$selinux_attr(r0, &(0x7f0000000200)='system_u:object_r:system_dbusd_var_lib_t:s0\x00', 0x2c) r1 = accept4$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000003c0), 0x1e5dc0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000480)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x80, r1, &(0x7f00000002c0)="8a409233828523bdcd6d501faa5e1460f31273cb0e90f906deeaa187a3e4d01b9eb516edcf920909c5f9366342524eccc49ff4ff3cf3dceb24521763b412c9fa06889edda15de61e84b61e520f8fbe63ea33743cb3fa7c13448db3cab1c1f282d058de3c599c4dee20a44fac6d2a98440c797b0776b4a9eb851fd7d6e6436e6a1db16e60f8ec9ddc062899df0f4d6e3d66de46670f14ad1ac6104fa708252a7462c043e34ecf5bcbc574dfee79561dc46553cc34", 0xb4, 0x0, 0x0, 0x0, r0}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2, 0x7, r2, &(0x7f0000000400)="ad71d632f4", 0x5, 0x9, 0x0, 0x2, r0}]) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000004c0)={0x0, 0x0, 0xffffffffffffffff, 0x4}) r3 = io_uring_setup(0x4c8e, &(0x7f0000000500)={0x0, 0x9d84, 0x1c, 0x2, 0x2fa, 0x0, r0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000580)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e20, 0x40, @empty, 0xd79b}}, 0x0, 0x0, 0x16, 0x0, "85d1191a58a2f27de4b44902caab4f42f235350c98f6489f2104d03d0cc56fb000dcef26f89f8ea46e2603754aeedb6f43b20d5c02bdf413d1f79ebdff0cb32090501722e56a785934df82838a5adefb"}, 0xd8) io_setup(0x7, &(0x7f0000000880)=0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000a80)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) io_submit(r7, 0x4, &(0x7f0000000cc0)=[&(0x7f0000000940)={0x0, 0x0, 0x0, 0x5, 0x20, r2, &(0x7f00000008c0)="0da7c1c104a5bdd590baa52dbb623f18626a0ce931f33251569345f0511a79fe9b84fe019489a72822f092ebc936812f4bca334d984b0afa9ab7443a32564ab3427a56d4be44a70e103ff44f", 0x4c, 0x7, 0x0, 0x1, r2}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x6, 0x5, r1, &(0x7f0000000980)="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", 0xfb, 0x4, 0x0, 0x0, r8}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x7, 0x0, r9, &(0x7f0000000b00), 0x0, 0x100000001, 0x0, 0x1, r2}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x7, 0x3, r3, &(0x7f0000000b80)="0fb2829617d6993a6e18a9a36c5f43050533b08bc7362076e39b70219615a58b12d72664b5d794fbd2a176080c971cbbb0ce3a88e6b464201baaf13a6e51580988cfcdc7e39e4da737461f51cbac8d01cb8878d9452ca6b4ef0b6f3f105030e735dc59320c4991e0ae5af33c0dcd7092cd9f37ce3cc31bcb68f890b691423dbed08603901f801187de00cf68cbad3ff6ae9b0d574fd449081867438ba72b42721b2bcea6a318c7651b57095358324f5eb068e6efea560341535a3fea74ca1e7825ab68c3a290e3e8a85bca958f065713cc53cb7db904e3a7933a06b7c00fe7b1d632c2c313b496", 0xe7, 0x1, 0x0, 0x1, r0}]) 15:28:38 executing program 6: getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl0\x00', r1, 0x4, 0xbe, 0x3, 0x8, 0x2, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x1, 0x38bc, 0x3}}) r3 = accept$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) accept$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f00000002c0)={@mcast2, 0x60, r4}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x382c6ac8}}, './file0\x00'}) getsockopt$inet_tcp_buf(r5, 0x6, 0x1c, &(0x7f0000000340)=""/175, &(0x7f0000000400)=0xaf) accept$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) accept$packet(r0, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000500)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000580)={'ip6tnl0\x00', r2, 0x2f, 0xff, 0x6, 0x400, 0x12, @private1, @empty, 0x8000, 0x20, 0xfffffffc, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'ip6_vti0\x00', r6, 0x4, 0x40, 0x80, 0x1f, 0x53, @remote, @mcast2, 0x40, 0x7, 0x6}}) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000700)={0x3, 0x6}, 0x4) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r7, 0x894b, &(0x7f0000000780)) r8 = memfd_secret(0x80000) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f00000007c0)={0x3, 0x1}, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000800)={0x5, {{0xa, 0x4e23, 0x9, @mcast2, 0x7fffffff}}}, 0x88) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) sendmsg$inet6(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)}, 0x20048004) 15:28:38 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0xf8, 0x0, &(0x7f0000000380)=[@enter_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0x7, 0x1, 0x7}, @fd, @flat=@handle={0x73682a85, 0xb}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}}, @register_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/66, 0x42, 0x1, 0x32}, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x34}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x40}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x60, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/170, 0xaa, 0x1, 0x22}, @flat=@weak_binder={0x77622a85, 0xa, 0x2}, @fda={0x66646185, 0xa, 0x4, 0x2a}}, &(0x7f0000000340)={0x0, 0x28, 0x40}}}, @dead_binder_done], 0xfb, 0x0, &(0x7f0000000480)="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"}) io_submit(0x0, 0x0, &(0x7f00000005c0)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x10000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000840)={0x20, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x98, "e333e58853c5fa"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001840)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001a40)={{0x0, 0xa3, 0x190b, 0x4, 0xdc3, 0x7, 0x9, 0x9f, 0xfffffffb, 0x200, 0x3f, 0x1, 0xffff, 0x400, 0x10000000}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001ac0)={{0x0, 0x9, 0x8, 0xffffffff, 0x3, 0x1, 0x1, 0x9, 0xf946, 0x7, 0x4, 0xd48, 0x3, 0x7fffffff, 0xfffffffffffff001}, 0x8, [0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001b40)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001d40)={{0x0, 0x40, 0x7fff, 0x2, 0x101, 0x4, 0x7fff, 0x1, 0xfffffe00, 0x35, 0x3ff, 0x1ff, 0x3, 0xca, 0x1}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002d40)={0x1000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x3f, "4dd071380578dc"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000003d40)={{0x0, 0x6, 0x0, 0x7, 0x5, 0xfffffffffffffffc, 0x7, 0x4, 0xff, 0x20, 0x1ff, 0x4000, 0x2ae, 0x5, 0xff}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000004d40)={0x7fffffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x3f, "ce40b9754ac8e1"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000005d40)={0x1ff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x3, "957c6398ec9700"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000006d40)={{0x0, 0xfffffffffffffffd, 0xff, 0x0, 0xd2e8, 0x8b3f, 0x4, 0xf936, 0x2, 0x5, 0x6, 0xd69, 0x2, 0x7, 0x200}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000007d40)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000007f40)={{0x0, 0x4, 0x5, 0x7, 0xffffffff, 0x3, 0x10000, 0x75, 0x0, 0x80000001, 0x80000000, 0x6, 0x526d45fb, 0x9, 0xfff}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000008f40)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000009140)={0x6e4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xd0, "38561831562967"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000068cc0)={0x6, [{r1}, {}, {0x0, r2}, {0x0, r3}, {}, {r4}, {r5, r6}, {r7}, {0x0, r8}, {r9}, {r10}, {}, {0x0, r11}, {r12}, {r13}, {r14}, {}, {0x0, r15}, {r16}], 0x1, "6d3cdc6e8fb7e6"}) 15:28:38 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x800, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000080), 0xd1dc, 0x28000) setsockopt$inet6_tcp_int(r2, 0x6, 0x3, &(0x7f00000000c0)=0x3, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x4) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000140)={0x41, {{0xa, 0x4e22, 0x40, @mcast1, 0x4}}, 0x0, 0x7, [{{0xa, 0x4e21, 0x8000, @private0, 0x7fff}}, {{0xa, 0x4e24, 0x2, @remote, 0x800}}, {{0xa, 0x4e21, 0x0, @mcast2, 0x7}}, {{0xa, 0x4e23, 0x6, @local, 0x20}}, {{0xa, 0x4e20, 0xef8, @loopback, 0x1}}, {{0xa, 0x4e20, 0x5, @local, 0x1}}, {{0xa, 0x4e24, 0x8, @mcast1, 0xda}}]}, 0x410) r3 = syz_open_dev$mouse(&(0x7f0000000580), 0x1000, 0x400) ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f00000005c0)) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000600), 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000640)={0xfffffffffffffffb, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x81, "73777614b01e26"}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001640)={{0x0, 0x9, 0x2, 0xff, 0x3, 0x2, 0x3, 0x1ff, 0x3f, 0x1f, 0x5, 0x8, 0x3, 0x81, 0xa1}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000002640)={{0x0, 0x3, 0x3ff, 0x7fff, 0x6, 0x8, 0x80, 0x7, 0x9, 0x4d, 0x5, 0x4, 0x2, 0x9, 0x100000000}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000026c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000028c0)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000002ac0)={0x7fff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xff, "461807b49ae465"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000003ac0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000003cc0)={{0x0, 0x1, 0x7, 0x9, 0x1, 0x7b, 0x3, 0xb6a, 0x400, 0x1, 0x80, 0x4, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000004cc0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000004ec0)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "f93bd29bd859bf"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000058640)={0x9, [{0x0, r4}, {}, {r5}, {}, {r6}, {0x0, r7}, {r8}, {}, {0x0, r9}, {}, {}, {r10}, {r11}, {0x0, r12}, {0x0, r13}], 0x3, "38cf153eb8069d"}) [ 60.267543] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.269357] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.271038] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.277574] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.281603] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 60.283059] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.292812] Bluetooth: hci0: HCI_REQ-0x0c1a [ 60.325467] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.333578] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 60.335901] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.337382] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 60.339587] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.340902] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 60.343114] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.345114] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.347711] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.351842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.353021] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.354594] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.356995] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 60.358784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.359964] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.361847] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 60.363333] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.368402] Bluetooth: hci1: HCI_REQ-0x0c1a [ 60.390436] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 60.391575] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 60.395856] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 60.396886] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.402752] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 60.404886] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.406650] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 60.411580] Bluetooth: hci4: HCI_REQ-0x0c1a [ 60.413603] Bluetooth: hci2: HCI_REQ-0x0c1a [ 60.415346] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 60.418164] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 60.425494] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 60.428248] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 60.438545] Bluetooth: hci5: HCI_REQ-0x0c1a [ 60.449971] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 60.451729] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.458029] Bluetooth: hci3: HCI_REQ-0x0c1a [ 60.519250] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 60.540774] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 60.542850] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 60.549384] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 60.552146] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 60.553658] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 60.555558] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 60.563420] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 60.564035] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 60.566195] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 60.567595] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 60.582835] Bluetooth: hci6: HCI_REQ-0x0c1a [ 60.583820] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 60.604339] Bluetooth: hci7: HCI_REQ-0x0c1a [ 62.349903] Bluetooth: hci0: command 0x0409 tx timeout [ 62.413377] Bluetooth: hci1: command 0x0409 tx timeout [ 62.477371] Bluetooth: hci3: command 0x0409 tx timeout [ 62.478045] Bluetooth: hci5: command 0x0409 tx timeout [ 62.478563] Bluetooth: hci2: command 0x0409 tx timeout [ 62.479152] Bluetooth: hci4: command 0x0409 tx timeout [ 62.605391] Bluetooth: hci6: command 0x0409 tx timeout [ 62.669606] Bluetooth: hci7: command 0x0409 tx timeout [ 64.397342] Bluetooth: hci0: command 0x041b tx timeout [ 64.461518] Bluetooth: hci1: command 0x041b tx timeout [ 64.525432] Bluetooth: hci4: command 0x041b tx timeout [ 64.525907] Bluetooth: hci2: command 0x041b tx timeout [ 64.526332] Bluetooth: hci5: command 0x041b tx timeout [ 64.526725] Bluetooth: hci3: command 0x041b tx timeout [ 64.653877] Bluetooth: hci6: command 0x041b tx timeout [ 64.717381] Bluetooth: hci7: command 0x041b tx timeout [ 66.445386] Bluetooth: hci0: command 0x040f tx timeout [ 66.509329] Bluetooth: hci1: command 0x040f tx timeout [ 66.573432] Bluetooth: hci3: command 0x040f tx timeout [ 66.573875] Bluetooth: hci5: command 0x040f tx timeout [ 66.574307] Bluetooth: hci2: command 0x040f tx timeout [ 66.574671] Bluetooth: hci4: command 0x040f tx timeout [ 66.701539] Bluetooth: hci6: command 0x040f tx timeout [ 66.765385] Bluetooth: hci7: command 0x040f tx timeout [ 68.493369] Bluetooth: hci0: command 0x0419 tx timeout [ 68.557336] Bluetooth: hci1: command 0x0419 tx timeout [ 68.621389] Bluetooth: hci4: command 0x0419 tx timeout [ 68.621826] Bluetooth: hci2: command 0x0419 tx timeout [ 68.622199] Bluetooth: hci5: command 0x0419 tx timeout [ 68.622623] Bluetooth: hci3: command 0x0419 tx timeout [ 68.749932] Bluetooth: hci6: command 0x0419 tx timeout [ 68.813390] Bluetooth: hci7: command 0x0419 tx timeout 15:29:29 executing program 3: setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)="c65ef990d11decc0721c9d23adce23f2c5eaa9cb65ae5ae3c1b9bb150ef68b31fbd3b3e950361d1ff2c329b263451b4d8891d97bc330167d8cd12eb0883839947c1d9a3d71c912fff313a3f3e481b8ffac12036438e4c9cd290e3168453e8459ba7aeee2f99d868ea3baec243651802dfca38e9231379458c48a4d6e49e5f761ac3918733aa2b9af86bc637bd4fb2453177da61394a0f4e28a85d46f9fd8ca53340f948cae06c2520ca7b9e13628b6e0d05b08205dd3d87b4a19ecd4a1bb0e0ca067aa9281b8c6", 0xc7) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000100)=""/132, &(0x7f00000001c0)=0x84) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000200)=""/42, &(0x7f0000000240)=0x2a) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000280)='reno\x00', 0x5) mq_getsetattr(0xffffffffffffffff, &(0x7f00000002c0)={0x8, 0xfffffffffffff68f, 0x7, 0xcc0f}, &(0x7f0000000300)) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000340)={0xdb5, 0x101, 0x401, 0x4}) r0 = syz_open_dev$loop(&(0x7f0000000380), 0x7, 0x80) io_cancel(0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x4, r0, &(0x7f00000003c0)="681b7397c305ba7ff3a311755ce6ca5d719de0f425eeca6c9c6839d11d9127a9f10e733776f6d1153a2db8d503c2bfbb9948c48e2ad0b3be8fd30b4846e3201a5e23e976d5075f7ef1f726e9dd01dd8d308c1b3f78d1ff1f1cbed5d5cbd4501224b19ae30464bb5191a1a160fc19636907c2ac4a076dc6a8f674b3645888c413d514bc24ab007cab90c7790674dcb4a309571df6917ba8453bd9ce9575e2b27b0cea4b9b552075042fb79ba19d7a415ea89b10", 0xb3, 0xfff, 0x0, 0x1}, &(0x7f00000004c0)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000540)) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000580)={{0x0, 0x100000001, 0xffffffff00000000, 0x5, 0x2, 0x3, 0x8, 0x6, 0x1f, 0x0, 0x2, 0x3ff, 0x3, 0x0, 0x1}}) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000001580)) socketpair(0x29, 0x5, 0x2, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000001600)={0x9, 0x8, 0x8, 0x3, 0x80000000}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000001640)={{{@in=@dev, @in6=@mcast2}}, {{@in6=@private1}, 0x0, @in=@multicast2}}, &(0x7f0000001740)=0xe8) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001780)={"465f0d9654dd829cc68b3244e2fc4a50", 0x0, 0x0, {0xd78, 0xffffffff}, {0x9, 0x3}, 0x0, [0x4, 0x3c63, 0x4, 0x1, 0x9, 0x80000000, 0x7f, 0x1, 0x7ff, 0x4, 0x3, 0x7ff, 0x8, 0x100000000, 0x8000, 0x5]}) r3 = socket(0x1a, 0x4, 0x401) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000001880), 0x4) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000018c0), 0x105200, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000001900)={0x9, 0xfffffff8, 0x6, 0x200, 0x2f18}, 0x14) 15:29:29 executing program 3: setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)="c65ef990d11decc0721c9d23adce23f2c5eaa9cb65ae5ae3c1b9bb150ef68b31fbd3b3e950361d1ff2c329b263451b4d8891d97bc330167d8cd12eb0883839947c1d9a3d71c912fff313a3f3e481b8ffac12036438e4c9cd290e3168453e8459ba7aeee2f99d868ea3baec243651802dfca38e9231379458c48a4d6e49e5f761ac3918733aa2b9af86bc637bd4fb2453177da61394a0f4e28a85d46f9fd8ca53340f948cae06c2520ca7b9e13628b6e0d05b08205dd3d87b4a19ecd4a1bb0e0ca067aa9281b8c6", 0xc7) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000100)=""/132, &(0x7f00000001c0)=0x84) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000200)=""/42, &(0x7f0000000240)=0x2a) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000280)='reno\x00', 0x5) mq_getsetattr(0xffffffffffffffff, &(0x7f00000002c0)={0x8, 0xfffffffffffff68f, 0x7, 0xcc0f}, &(0x7f0000000300)) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000340)={0xdb5, 0x101, 0x401, 0x4}) r0 = syz_open_dev$loop(&(0x7f0000000380), 0x7, 0x80) io_cancel(0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x4, r0, &(0x7f00000003c0)="681b7397c305ba7ff3a311755ce6ca5d719de0f425eeca6c9c6839d11d9127a9f10e733776f6d1153a2db8d503c2bfbb9948c48e2ad0b3be8fd30b4846e3201a5e23e976d5075f7ef1f726e9dd01dd8d308c1b3f78d1ff1f1cbed5d5cbd4501224b19ae30464bb5191a1a160fc19636907c2ac4a076dc6a8f674b3645888c413d514bc24ab007cab90c7790674dcb4a309571df6917ba8453bd9ce9575e2b27b0cea4b9b552075042fb79ba19d7a415ea89b10", 0xb3, 0xfff, 0x0, 0x1}, &(0x7f00000004c0)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000540)) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000580)={{0x0, 0x100000001, 0xffffffff00000000, 0x5, 0x2, 0x3, 0x8, 0x6, 0x1f, 0x0, 0x2, 0x3ff, 0x3, 0x0, 0x1}}) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000001580)) socketpair(0x29, 0x5, 0x2, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000001600)={0x9, 0x8, 0x8, 0x3, 0x80000000}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000001640)={{{@in=@dev, @in6=@mcast2}}, {{@in6=@private1}, 0x0, @in=@multicast2}}, &(0x7f0000001740)=0xe8) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001780)={"465f0d9654dd829cc68b3244e2fc4a50", 0x0, 0x0, {0xd78, 0xffffffff}, {0x9, 0x3}, 0x0, [0x4, 0x3c63, 0x4, 0x1, 0x9, 0x80000000, 0x7f, 0x1, 0x7ff, 0x4, 0x3, 0x7ff, 0x8, 0x100000000, 0x8000, 0x5]}) r3 = socket(0x1a, 0x4, 0x401) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000001880), 0x4) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000018c0), 0x105200, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000001900)={0x9, 0xfffffff8, 0x6, 0x200, 0x2f18}, 0x14) 15:29:30 executing program 3: setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)="c65ef990d11decc0721c9d23adce23f2c5eaa9cb65ae5ae3c1b9bb150ef68b31fbd3b3e950361d1ff2c329b263451b4d8891d97bc330167d8cd12eb0883839947c1d9a3d71c912fff313a3f3e481b8ffac12036438e4c9cd290e3168453e8459ba7aeee2f99d868ea3baec243651802dfca38e9231379458c48a4d6e49e5f761ac3918733aa2b9af86bc637bd4fb2453177da61394a0f4e28a85d46f9fd8ca53340f948cae06c2520ca7b9e13628b6e0d05b08205dd3d87b4a19ecd4a1bb0e0ca067aa9281b8c6", 0xc7) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000100)=""/132, &(0x7f00000001c0)=0x84) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000200)=""/42, &(0x7f0000000240)=0x2a) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000280)='reno\x00', 0x5) mq_getsetattr(0xffffffffffffffff, &(0x7f00000002c0)={0x8, 0xfffffffffffff68f, 0x7, 0xcc0f}, &(0x7f0000000300)) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000340)={0xdb5, 0x101, 0x401, 0x4}) r0 = syz_open_dev$loop(&(0x7f0000000380), 0x7, 0x80) io_cancel(0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x4, r0, &(0x7f00000003c0)="681b7397c305ba7ff3a311755ce6ca5d719de0f425eeca6c9c6839d11d9127a9f10e733776f6d1153a2db8d503c2bfbb9948c48e2ad0b3be8fd30b4846e3201a5e23e976d5075f7ef1f726e9dd01dd8d308c1b3f78d1ff1f1cbed5d5cbd4501224b19ae30464bb5191a1a160fc19636907c2ac4a076dc6a8f674b3645888c413d514bc24ab007cab90c7790674dcb4a309571df6917ba8453bd9ce9575e2b27b0cea4b9b552075042fb79ba19d7a415ea89b10", 0xb3, 0xfff, 0x0, 0x1}, &(0x7f00000004c0)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000540)) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000580)={{0x0, 0x100000001, 0xffffffff00000000, 0x5, 0x2, 0x3, 0x8, 0x6, 0x1f, 0x0, 0x2, 0x3ff, 0x3, 0x0, 0x1}}) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000001580)) socketpair(0x29, 0x5, 0x2, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000001600)={0x9, 0x8, 0x8, 0x3, 0x80000000}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000001640)={{{@in=@dev, @in6=@mcast2}}, {{@in6=@private1}, 0x0, @in=@multicast2}}, &(0x7f0000001740)=0xe8) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001780)={"465f0d9654dd829cc68b3244e2fc4a50", 0x0, 0x0, {0xd78, 0xffffffff}, {0x9, 0x3}, 0x0, [0x4, 0x3c63, 0x4, 0x1, 0x9, 0x80000000, 0x7f, 0x1, 0x7ff, 0x4, 0x3, 0x7ff, 0x8, 0x100000000, 0x8000, 0x5]}) r3 = socket(0x1a, 0x4, 0x401) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000001880), 0x4) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000018c0), 0x105200, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000001900)={0x9, 0xfffffff8, 0x6, 0x200, 0x2f18}, 0x14) 15:29:30 executing program 3: setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)="c65ef990d11decc0721c9d23adce23f2c5eaa9cb65ae5ae3c1b9bb150ef68b31fbd3b3e950361d1ff2c329b263451b4d8891d97bc330167d8cd12eb0883839947c1d9a3d71c912fff313a3f3e481b8ffac12036438e4c9cd290e3168453e8459ba7aeee2f99d868ea3baec243651802dfca38e9231379458c48a4d6e49e5f761ac3918733aa2b9af86bc637bd4fb2453177da61394a0f4e28a85d46f9fd8ca53340f948cae06c2520ca7b9e13628b6e0d05b08205dd3d87b4a19ecd4a1bb0e0ca067aa9281b8c6", 0xc7) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000100)=""/132, &(0x7f00000001c0)=0x84) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000200)=""/42, &(0x7f0000000240)=0x2a) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000280)='reno\x00', 0x5) mq_getsetattr(0xffffffffffffffff, &(0x7f00000002c0)={0x8, 0xfffffffffffff68f, 0x7, 0xcc0f}, &(0x7f0000000300)) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000340)={0xdb5, 0x101, 0x401, 0x4}) r0 = syz_open_dev$loop(&(0x7f0000000380), 0x7, 0x80) io_cancel(0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x4, r0, &(0x7f00000003c0)="681b7397c305ba7ff3a311755ce6ca5d719de0f425eeca6c9c6839d11d9127a9f10e733776f6d1153a2db8d503c2bfbb9948c48e2ad0b3be8fd30b4846e3201a5e23e976d5075f7ef1f726e9dd01dd8d308c1b3f78d1ff1f1cbed5d5cbd4501224b19ae30464bb5191a1a160fc19636907c2ac4a076dc6a8f674b3645888c413d514bc24ab007cab90c7790674dcb4a309571df6917ba8453bd9ce9575e2b27b0cea4b9b552075042fb79ba19d7a415ea89b10", 0xb3, 0xfff, 0x0, 0x1}, &(0x7f00000004c0)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000540)) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000580)={{0x0, 0x100000001, 0xffffffff00000000, 0x5, 0x2, 0x3, 0x8, 0x6, 0x1f, 0x0, 0x2, 0x3ff, 0x3, 0x0, 0x1}}) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000001580)) socketpair(0x29, 0x5, 0x2, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000001600)={0x9, 0x8, 0x8, 0x3, 0x80000000}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000001640)={{{@in=@dev, @in6=@mcast2}}, {{@in6=@private1}, 0x0, @in=@multicast2}}, &(0x7f0000001740)=0xe8) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001780)={"465f0d9654dd829cc68b3244e2fc4a50", 0x0, 0x0, {0xd78, 0xffffffff}, {0x9, 0x3}, 0x0, [0x4, 0x3c63, 0x4, 0x1, 0x9, 0x80000000, 0x7f, 0x1, 0x7ff, 0x4, 0x3, 0x7ff, 0x8, 0x100000000, 0x8000, 0x5]}) r3 = socket(0x1a, 0x4, 0x401) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000001880), 0x4) openat$vcsa(0xffffffffffffff9c, &(0x7f00000018c0), 0x105200, 0x0) 15:29:30 executing program 3: setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)="c65ef990d11decc0721c9d23adce23f2c5eaa9cb65ae5ae3c1b9bb150ef68b31fbd3b3e950361d1ff2c329b263451b4d8891d97bc330167d8cd12eb0883839947c1d9a3d71c912fff313a3f3e481b8ffac12036438e4c9cd290e3168453e8459ba7aeee2f99d868ea3baec243651802dfca38e9231379458c48a4d6e49e5f761ac3918733aa2b9af86bc637bd4fb2453177da61394a0f4e28a85d46f9fd8ca53340f948cae06c2520ca7b9e13628b6e0d05b08205dd3d87b4a19ecd4a1bb0e0ca067aa9281b8c6", 0xc7) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000100)=""/132, &(0x7f00000001c0)=0x84) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000200)=""/42, &(0x7f0000000240)=0x2a) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000280)='reno\x00', 0x5) mq_getsetattr(0xffffffffffffffff, &(0x7f00000002c0)={0x8, 0xfffffffffffff68f, 0x7, 0xcc0f}, &(0x7f0000000300)) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000340)={0xdb5, 0x101, 0x401, 0x4}) r0 = syz_open_dev$loop(&(0x7f0000000380), 0x7, 0x80) io_cancel(0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x4, r0, &(0x7f00000003c0)="681b7397c305ba7ff3a311755ce6ca5d719de0f425eeca6c9c6839d11d9127a9f10e733776f6d1153a2db8d503c2bfbb9948c48e2ad0b3be8fd30b4846e3201a5e23e976d5075f7ef1f726e9dd01dd8d308c1b3f78d1ff1f1cbed5d5cbd4501224b19ae30464bb5191a1a160fc19636907c2ac4a076dc6a8f674b3645888c413d514bc24ab007cab90c7790674dcb4a309571df6917ba8453bd9ce9575e2b27b0cea4b9b552075042fb79ba19d7a415ea89b10", 0xb3, 0xfff, 0x0, 0x1}, &(0x7f00000004c0)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000540)) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000580)={{0x0, 0x100000001, 0xffffffff00000000, 0x5, 0x2, 0x3, 0x8, 0x6, 0x1f, 0x0, 0x2, 0x3ff, 0x3, 0x0, 0x1}}) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000001580)) socketpair(0x29, 0x5, 0x2, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000001600)={0x9, 0x8, 0x8, 0x3, 0x80000000}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000001640)={{{@in=@dev, @in6=@mcast2}}, {{@in6=@private1}, 0x0, @in=@multicast2}}, &(0x7f0000001740)=0xe8) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001780)={"465f0d9654dd829cc68b3244e2fc4a50", 0x0, 0x0, {0xd78, 0xffffffff}, {0x9, 0x3}, 0x0, [0x4, 0x3c63, 0x4, 0x1, 0x9, 0x80000000, 0x7f, 0x1, 0x7ff, 0x4, 0x3, 0x7ff, 0x8, 0x100000000, 0x8000, 0x5]}) socket(0x1a, 0x4, 0x401) openat$vcsa(0xffffffffffffff9c, &(0x7f00000018c0), 0x105200, 0x0) 15:29:30 executing program 3: setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)="c65ef990d11decc0721c9d23adce23f2c5eaa9cb65ae5ae3c1b9bb150ef68b31fbd3b3e950361d1ff2c329b263451b4d8891d97bc330167d8cd12eb0883839947c1d9a3d71c912fff313a3f3e481b8ffac12036438e4c9cd290e3168453e8459ba7aeee2f99d868ea3baec243651802dfca38e9231379458c48a4d6e49e5f761ac3918733aa2b9af86bc637bd4fb2453177da61394a0f4e28a85d46f9fd8ca53340f948cae06c2520ca7b9e13628b6e0d05b08205dd3d87b4a19ecd4a1bb0e0ca067aa9281b8c6", 0xc7) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000100)=""/132, &(0x7f00000001c0)=0x84) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000200)=""/42, &(0x7f0000000240)=0x2a) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000280)='reno\x00', 0x5) mq_getsetattr(0xffffffffffffffff, &(0x7f00000002c0)={0x8, 0xfffffffffffff68f, 0x7, 0xcc0f}, &(0x7f0000000300)) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000340)={0xdb5, 0x101, 0x401, 0x4}) r0 = syz_open_dev$loop(&(0x7f0000000380), 0x7, 0x80) io_cancel(0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x4, r0, &(0x7f00000003c0)="681b7397c305ba7ff3a311755ce6ca5d719de0f425eeca6c9c6839d11d9127a9f10e733776f6d1153a2db8d503c2bfbb9948c48e2ad0b3be8fd30b4846e3201a5e23e976d5075f7ef1f726e9dd01dd8d308c1b3f78d1ff1f1cbed5d5cbd4501224b19ae30464bb5191a1a160fc19636907c2ac4a076dc6a8f674b3645888c413d514bc24ab007cab90c7790674dcb4a309571df6917ba8453bd9ce9575e2b27b0cea4b9b552075042fb79ba19d7a415ea89b10", 0xb3, 0xfff, 0x0, 0x1}, &(0x7f00000004c0)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000540)) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000580)={{0x0, 0x100000001, 0xffffffff00000000, 0x5, 0x2, 0x3, 0x8, 0x6, 0x1f, 0x0, 0x2, 0x3ff, 0x3, 0x0, 0x1}}) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000001580)) socketpair(0x29, 0x5, 0x2, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000001600)={0x9, 0x8, 0x8, 0x3, 0x80000000}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000001640)={{{@in=@dev, @in6=@mcast2}}, {{@in6=@private1}, 0x0, @in=@multicast2}}, &(0x7f0000001740)=0xe8) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001780)={"465f0d9654dd829cc68b3244e2fc4a50", 0x0, 0x0, {0xd78, 0xffffffff}, {0x9, 0x3}, 0x0, [0x4, 0x3c63, 0x4, 0x1, 0x9, 0x80000000, 0x7f, 0x1, 0x7ff, 0x4, 0x3, 0x7ff, 0x8, 0x100000000, 0x8000, 0x5]}) openat$vcsa(0xffffffffffffff9c, &(0x7f00000018c0), 0x105200, 0x0) 15:29:31 executing program 3: setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)="c65ef990d11decc0721c9d23adce23f2c5eaa9cb65ae5ae3c1b9bb150ef68b31fbd3b3e950361d1ff2c329b263451b4d8891d97bc330167d8cd12eb0883839947c1d9a3d71c912fff313a3f3e481b8ffac12036438e4c9cd290e3168453e8459ba7aeee2f99d868ea3baec243651802dfca38e9231379458c48a4d6e49e5f761ac3918733aa2b9af86bc637bd4fb2453177da61394a0f4e28a85d46f9fd8ca53340f948cae06c2520ca7b9e13628b6e0d05b08205dd3d87b4a19ecd4a1bb0e0ca067aa9281b8c6", 0xc7) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000100)=""/132, &(0x7f00000001c0)=0x84) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000200)=""/42, &(0x7f0000000240)=0x2a) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000280)='reno\x00', 0x5) mq_getsetattr(0xffffffffffffffff, &(0x7f00000002c0)={0x8, 0xfffffffffffff68f, 0x7, 0xcc0f}, &(0x7f0000000300)) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000340)={0xdb5, 0x101, 0x401, 0x4}) r0 = syz_open_dev$loop(&(0x7f0000000380), 0x7, 0x80) io_cancel(0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x4, r0, &(0x7f00000003c0)="681b7397c305ba7ff3a311755ce6ca5d719de0f425eeca6c9c6839d11d9127a9f10e733776f6d1153a2db8d503c2bfbb9948c48e2ad0b3be8fd30b4846e3201a5e23e976d5075f7ef1f726e9dd01dd8d308c1b3f78d1ff1f1cbed5d5cbd4501224b19ae30464bb5191a1a160fc19636907c2ac4a076dc6a8f674b3645888c413d514bc24ab007cab90c7790674dcb4a309571df6917ba8453bd9ce9575e2b27b0cea4b9b552075042fb79ba19d7a415ea89b10", 0xb3, 0xfff, 0x0, 0x1}, &(0x7f00000004c0)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000540)) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000580)={{0x0, 0x100000001, 0xffffffff00000000, 0x5, 0x2, 0x3, 0x8, 0x6, 0x1f, 0x0, 0x2, 0x3ff, 0x3, 0x0, 0x1}}) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000001580)) socketpair(0x29, 0x5, 0x2, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000001600)={0x9, 0x8, 0x8, 0x3, 0x80000000}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000001640)={{{@in=@dev, @in6=@mcast2}}, {{@in6=@private1}, 0x0, @in=@multicast2}}, &(0x7f0000001740)=0xe8) openat$vcsa(0xffffffffffffff9c, &(0x7f00000018c0), 0x105200, 0x0) 15:29:31 executing program 3: setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)="c65ef990d11decc0721c9d23adce23f2c5eaa9cb65ae5ae3c1b9bb150ef68b31fbd3b3e950361d1ff2c329b263451b4d8891d97bc330167d8cd12eb0883839947c1d9a3d71c912fff313a3f3e481b8ffac12036438e4c9cd290e3168453e8459ba7aeee2f99d868ea3baec243651802dfca38e9231379458c48a4d6e49e5f761ac3918733aa2b9af86bc637bd4fb2453177da61394a0f4e28a85d46f9fd8ca53340f948cae06c2520ca7b9e13628b6e0d05b08205dd3d87b4a19ecd4a1bb0e0ca067aa9281b8c6", 0xc7) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000100)=""/132, &(0x7f00000001c0)=0x84) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000200)=""/42, &(0x7f0000000240)=0x2a) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000280)='reno\x00', 0x5) mq_getsetattr(0xffffffffffffffff, &(0x7f00000002c0)={0x8, 0xfffffffffffff68f, 0x7, 0xcc0f}, &(0x7f0000000300)) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000340)={0xdb5, 0x101, 0x401, 0x4}) r0 = syz_open_dev$loop(&(0x7f0000000380), 0x7, 0x80) io_cancel(0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x4, r0, &(0x7f00000003c0)="681b7397c305ba7ff3a311755ce6ca5d719de0f425eeca6c9c6839d11d9127a9f10e733776f6d1153a2db8d503c2bfbb9948c48e2ad0b3be8fd30b4846e3201a5e23e976d5075f7ef1f726e9dd01dd8d308c1b3f78d1ff1f1cbed5d5cbd4501224b19ae30464bb5191a1a160fc19636907c2ac4a076dc6a8f674b3645888c413d514bc24ab007cab90c7790674dcb4a309571df6917ba8453bd9ce9575e2b27b0cea4b9b552075042fb79ba19d7a415ea89b10", 0xb3, 0xfff, 0x0, 0x1}, &(0x7f00000004c0)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000540)) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000580)={{0x0, 0x100000001, 0xffffffff00000000, 0x5, 0x2, 0x3, 0x8, 0x6, 0x1f, 0x0, 0x2, 0x3ff, 0x3, 0x0, 0x1}}) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000001580)) socketpair(0x29, 0x5, 0x2, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000001600)={0x9, 0x8, 0x8, 0x3, 0x80000000}, 0x14) openat$vcsa(0xffffffffffffff9c, &(0x7f00000018c0), 0x105200, 0x0) 15:29:46 executing program 1: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"d4c0cadc7862c32b72c9fd760c05ca23", 0x0, 0x0, {0x0, 0x8}, {0x3ff}, 0x1000, [0x6, 0x9, 0x100000000, 0x35e3, 0x200, 0x2, 0xffffffffffff7fff, 0x10000, 0x8, 0x4, 0xff, 0x7049b48f, 0xfff, 0xffffffffffffff01, 0x7, 0x10000]}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3}, 0x1) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"87ccb543c14d08e63a7b0ba432b0a614", r0, r0, {0x7, 0xffffffff}, {0x5, 0x333e}, 0x8, [0x0, 0x4, 0x10001, 0x6, 0x800, 0x3, 0x7, 0x5d, 0x16b7, 0x9, 0x8d76, 0xfffffffffffffff9, 0x0, 0x4, 0x80, 0x5]}) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14, 0x80000) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@ipv4={'\x00', '\xff\xff', @empty}, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5, 0x0, 0x401, 0x100, 0x2, 0x40000040, r2}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@rand_addr=' \x01\x00', @mcast1, @loopback, 0x8, 0x3, 0x5, 0x0, 0x3, 0x0, r2}) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000003c0), 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_DEL_MFC(r4, 0x29, 0xcd, &(0x7f0000000440)={{0xa, 0x4e20, 0x1ff, @local, 0xb07f}, {0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffffffff}, 0x7f, [0x8, 0xfffff801, 0x5, 0xef, 0x7fffffff, 0x581, 0x2, 0xc6b5]}, 0x5c) r5 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_tcp_int(r5, 0x6, 0x4, &(0x7f00000004c0)=0x1, 0x4) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000500)={@local, @remote, @ipv4={'\x00', '\xff\xff', @remote}, 0x5, 0x6, 0xc4, 0x400, 0xffff, 0xa4, r2}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000580)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000000b00)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000600)={0x4b4, 0x13, 0x100, 0x70bd28, 0x25dfdbfe, {0x12, 0x1, 0x2, 0x20, {0x4e23, 0x4e21, [0x1ff, 0x6, 0x83, 0x9], [0x4, 0x400, 0x0, 0x1000], r2, [0x0, 0x7d70dae6]}, 0x20000000, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x98, 0x1, "059b6a667558d3c66dcf091a25471766a25b0cac36aca9a4484e9cf401819e296006c7f789ff62840ca516b9d2b290b8f16d8bec76ec6ac61f77e08ec20bb666a50c0cff81d4c90cd0f45dd00df1748717a64fc96306753dda1a1690d6627aa8bdb85291d11f65631909ed0d9ed5cfb8427d1be0fa9894541309819413fcd530ee4df011dc66387e4914493cf585024d169d8e6f"}, @INET_DIAG_REQ_BYTECODE={0x13, 0x1, "dc71715d25ba6ee08beeddda723dfc"}, @INET_DIAG_REQ_BYTECODE={0xcd, 0x1, "49add60b18e0036c0a16eaf44a81abdb4e83421fb342bdf32d55ea02922c16d837b1f662fadad3afb9280c940af20c1ed5998cb3bfc2b8a1d31b6c79a464e6a88709186dbe1a4895d6222dec8a020816fa710235be1f8b1864b2c79e751b428d9d436f0e38b698deb468eb3ffdb7f43c819480879640233f63742e7104cd75e0784cec9db1be334ce53faa052c5e196964b6279bf0d27f70e2869c6bba9755305d5f6f1658460001f8f40e006f69f198bace92546de1d325b71ad679e02838afc66b6cae2237a10126"}, @INET_DIAG_REQ_BYTECODE={0xb8, 0x1, "24a43a7172daa0a345e28865db7af0d7898b92bbadd1c7d6b8eaa6f8a05795a8ecf9f7d29640c57e09379e74e26e83a82c285fca9fdaf29b4f4aae5457914a8782439e65c710b1105e81944504464bbee0abc77d38d56c5c830c1e3e14fa725f50551e0f2aa47c82a2ae0a548b040f0b993cd0c03932296826466e0e20a25e825fa34febdfb68c70a0bdd4857248b449d14c7dfa5081257e27fb0ed8841595203227e8b9a9edf6dfa6e71cd4ecc481a48b44fed9"}, @INET_DIAG_REQ_BYTECODE={0xf3, 0x1, "9f72c4ce3bf66789cc8bf81aafe5763da16a6419845ecdd391d034940dc78785af0c6264c1e6e935f8c9d58cb11ac66ec7fd2825b780583b16da3e8a1a8b786e05b7ca7b62c66210cd326337219a250dccc4580ae7326c1612c65ee9c70b69655969f39e86a63e2f979fba2ea591e389df04c8ae490a2f039f469bf9473abbe351b505b9d1fe51e9e0b25b71fa58ff69549b62f6671940c4c1ba46c2a84564728b16d9174220eecef8b88e153ca5dacd20687a0a8075ad66f2ac7ea01790fbccbee7c6fc6134c5071d5baf170d9ca622eaa3f34e4a27cc0d7a5b04bfb9f97ab6a7c9cff4f49097548f9cad923f18ac"}, @INET_DIAG_REQ_BYTECODE={0x2f, 0x1, "6e57e41e4bb384c0a698cef4b0dfdfd1a07924d0b199ab872feb015c181629b5e47e71a13949136345bb98"}, @INET_DIAG_REQ_BYTECODE={0x9e, 0x1, "593ed5c78e541f262c3a4c4e817da74e842da407028b248fce2e5a07fbdf1af402edbc9d717eae59eeed9c77bc98f0423eaefc6be3226b6e7f65b8d1f0b7245196233daeb7306837eeef01c5248af4b6049d9eaef7002fa789d797df73319fe2c4fd95f3b47dcd6df2d6b9ca962df181c4bc568fd49312fb7fac088dd004ab8cbe7a363394e666ee28edd76791c9efccac8089a58956ebf59081"}, @INET_DIAG_REQ_BYTECODE={0x70, 0x1, "6ea43988ed441e20c79941a15549a58d5d24d1bd36a1b35de7547742353ed6cc6b6a73426bb5cf187a0ffbac0f1ab2d43b5fd1c77219efc224cabafa0bdd107cc376f449f02f066354a3237fb4eeea6adc4ae50ae4c214ae755a0f7cbb75ab1587cd5c81efd6830302901edc"}]}, 0x4b4}, 0x1, 0x0, 0x0, 0x20000000}, 0x8800) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f0000000b40)={0x1}, 0x4) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r6, 0x89fa, &(0x7f0000000c00)={'ip6gre0\x00', &(0x7f0000000b80)={'syztnl0\x00', r2, 0x4, 0x6, 0x3, 0x8000, 0x2, @loopback, @mcast1, 0x7, 0x40, 0x9, 0x200}}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000c40)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000c80)={0x3b, 0xd, '\x00', [@enc_lim={0x4, 0x1, 0x7f}, @ra={0x5, 0x2, 0x7f}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x2, 0xc, 0x7f, 0x4, [0x2, 0x3, 0xffffffffffff896e, 0x3, 0xf17, 0x400]}}, @ra={0x5, 0x2, 0x1}, @jumbo={0xc2, 0x4, 0x4}, @enc_lim, @jumbo={0xc2, 0x4, 0x2d}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, 0x78) 15:29:46 executing program 6: getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl0\x00', r1, 0x4, 0xbe, 0x3, 0x8, 0x2, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x1, 0x38bc, 0x3}}) r3 = accept$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) accept$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f00000002c0)={@mcast2, 0x60, r4}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x382c6ac8}}, './file0\x00'}) getsockopt$inet_tcp_buf(r5, 0x6, 0x1c, &(0x7f0000000340)=""/175, &(0x7f0000000400)=0xaf) accept$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) accept$packet(r0, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000500)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000580)={'ip6tnl0\x00', r2, 0x2f, 0xff, 0x6, 0x400, 0x12, @private1, @empty, 0x8000, 0x20, 0xfffffffc, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'ip6_vti0\x00', r6, 0x4, 0x40, 0x80, 0x1f, 0x53, @remote, @mcast2, 0x40, 0x7, 0x6}}) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000700)={0x3, 0x6}, 0x4) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r7, 0x894b, &(0x7f0000000780)) r8 = memfd_secret(0x80000) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f00000007c0)={0x3, 0x1}, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000800)={0x5, {{0xa, 0x4e23, 0x9, @mcast2, 0x7fffffff}}}, 0x88) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) sendmsg$inet6(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)}, 0x20048004) 15:29:46 executing program 3: setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)="c65ef990d11decc0721c9d23adce23f2c5eaa9cb65ae5ae3c1b9bb150ef68b31fbd3b3e950361d1ff2c329b263451b4d8891d97bc330167d8cd12eb0883839947c1d9a3d71c912fff313a3f3e481b8ffac12036438e4c9cd290e3168453e8459ba7aeee2f99d868ea3baec243651802dfca38e9231379458c48a4d6e49e5f761ac3918733aa2b9af86bc637bd4fb2453177da61394a0f4e28a85d46f9fd8ca53340f948cae06c2520ca7b9e13628b6e0d05b08205dd3d87b4a19ecd4a1bb0e0ca067aa9281b8c6", 0xc7) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000100)=""/132, &(0x7f00000001c0)=0x84) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000200)=""/42, &(0x7f0000000240)=0x2a) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000280)='reno\x00', 0x5) mq_getsetattr(0xffffffffffffffff, &(0x7f00000002c0)={0x8, 0xfffffffffffff68f, 0x7, 0xcc0f}, &(0x7f0000000300)) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000340)={0xdb5, 0x101, 0x401, 0x4}) r0 = syz_open_dev$loop(&(0x7f0000000380), 0x7, 0x80) io_cancel(0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x4, r0, &(0x7f00000003c0)="681b7397c305ba7ff3a311755ce6ca5d719de0f425eeca6c9c6839d11d9127a9f10e733776f6d1153a2db8d503c2bfbb9948c48e2ad0b3be8fd30b4846e3201a5e23e976d5075f7ef1f726e9dd01dd8d308c1b3f78d1ff1f1cbed5d5cbd4501224b19ae30464bb5191a1a160fc19636907c2ac4a076dc6a8f674b3645888c413d514bc24ab007cab90c7790674dcb4a309571df6917ba8453bd9ce9575e2b27b0cea4b9b552075042fb79ba19d7a415ea89b10", 0xb3, 0xfff, 0x0, 0x1}, &(0x7f00000004c0)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000540)) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000580)={{0x0, 0x100000001, 0xffffffff00000000, 0x5, 0x2, 0x3, 0x8, 0x6, 0x1f, 0x0, 0x2, 0x3ff, 0x3, 0x0, 0x1}}) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000001580)) socketpair(0x29, 0x5, 0x2, &(0x7f00000015c0)) openat$vcsa(0xffffffffffffff9c, &(0x7f00000018c0), 0x105200, 0x0) 15:29:46 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x800, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000080), 0xd1dc, 0x28000) setsockopt$inet6_tcp_int(r2, 0x6, 0x3, &(0x7f00000000c0)=0x3, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x4) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000140)={0x41, {{0xa, 0x4e22, 0x40, @mcast1, 0x4}}, 0x0, 0x7, [{{0xa, 0x4e21, 0x8000, @private0, 0x7fff}}, {{0xa, 0x4e24, 0x2, @remote, 0x800}}, {{0xa, 0x4e21, 0x0, @mcast2, 0x7}}, {{0xa, 0x4e23, 0x6, @local, 0x20}}, {{0xa, 0x4e20, 0xef8, @loopback, 0x1}}, {{0xa, 0x4e20, 0x5, @local, 0x1}}, {{0xa, 0x4e24, 0x8, @mcast1, 0xda}}]}, 0x410) r3 = syz_open_dev$mouse(&(0x7f0000000580), 0x1000, 0x400) ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f00000005c0)) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000600), 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000640)={0xfffffffffffffffb, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x81, "73777614b01e26"}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001640)={{0x0, 0x9, 0x2, 0xff, 0x3, 0x2, 0x3, 0x1ff, 0x3f, 0x1f, 0x5, 0x8, 0x3, 0x81, 0xa1}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000002640)={{0x0, 0x3, 0x3ff, 0x7fff, 0x6, 0x8, 0x80, 0x7, 0x9, 0x4d, 0x5, 0x4, 0x2, 0x9, 0x100000000}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000026c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000028c0)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000002ac0)={0x7fff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xff, "461807b49ae465"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000003ac0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000003cc0)={{0x0, 0x1, 0x7, 0x9, 0x1, 0x7b, 0x3, 0xb6a, 0x400, 0x1, 0x80, 0x4, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000004cc0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000004ec0)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "f93bd29bd859bf"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000058640)={0x9, [{0x0, r4}, {}, {r5}, {}, {r6}, {0x0, r7}, {r8}, {}, {0x0, r9}, {}, {}, {r10}, {r11}, {0x0, r12}, {0x0, r13}], 0x3, "38cf153eb8069d"}) 15:29:46 executing program 5: ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000000)={0x0, 0x1ff, 0x8798}) mq_timedsend(0xffffffffffffffff, &(0x7f0000000040)="48f82bdea935cfba16267b6f7306e05a79674cd19b67f551", 0x18, 0x6, &(0x7f0000000080)={0x0, 0x989680}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) syz_io_uring_setup(0x20f, &(0x7f0000000100)={0x0, 0xc87d, 0x20, 0x2, 0x52, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) write$selinux_attr(r0, &(0x7f0000000200)='system_u:object_r:system_dbusd_var_lib_t:s0\x00', 0x2c) r1 = accept4$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000003c0), 0x1e5dc0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000480)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x80, r1, &(0x7f00000002c0)="8a409233828523bdcd6d501faa5e1460f31273cb0e90f906deeaa187a3e4d01b9eb516edcf920909c5f9366342524eccc49ff4ff3cf3dceb24521763b412c9fa06889edda15de61e84b61e520f8fbe63ea33743cb3fa7c13448db3cab1c1f282d058de3c599c4dee20a44fac6d2a98440c797b0776b4a9eb851fd7d6e6436e6a1db16e60f8ec9ddc062899df0f4d6e3d66de46670f14ad1ac6104fa708252a7462c043e34ecf5bcbc574dfee79561dc46553cc34", 0xb4, 0x0, 0x0, 0x0, r0}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2, 0x7, r2, &(0x7f0000000400)="ad71d632f4", 0x5, 0x9, 0x0, 0x2, r0}]) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000004c0)={0x0, 0x0, 0xffffffffffffffff, 0x4}) r3 = io_uring_setup(0x4c8e, &(0x7f0000000500)={0x0, 0x9d84, 0x1c, 0x2, 0x2fa, 0x0, r0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000580)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e20, 0x40, @empty, 0xd79b}}, 0x0, 0x0, 0x16, 0x0, "85d1191a58a2f27de4b44902caab4f42f235350c98f6489f2104d03d0cc56fb000dcef26f89f8ea46e2603754aeedb6f43b20d5c02bdf413d1f79ebdff0cb32090501722e56a785934df82838a5adefb"}, 0xd8) io_setup(0x7, &(0x7f0000000880)=0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000a80)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) io_submit(r7, 0x4, &(0x7f0000000cc0)=[&(0x7f0000000940)={0x0, 0x0, 0x0, 0x5, 0x20, r2, &(0x7f00000008c0)="0da7c1c104a5bdd590baa52dbb623f18626a0ce931f33251569345f0511a79fe9b84fe019489a72822f092ebc936812f4bca334d984b0afa9ab7443a32564ab3427a56d4be44a70e103ff44f", 0x4c, 0x7, 0x0, 0x1, r2}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x6, 0x5, r1, &(0x7f0000000980)="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", 0xfb, 0x4, 0x0, 0x0, r8}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x7, 0x0, r9, &(0x7f0000000b00), 0x0, 0x100000001, 0x0, 0x1, r2}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x7, 0x3, r3, &(0x7f0000000b80)="0fb2829617d6993a6e18a9a36c5f43050533b08bc7362076e39b70219615a58b12d72664b5d794fbd2a176080c971cbbb0ce3a88e6b464201baaf13a6e51580988cfcdc7e39e4da737461f51cbac8d01cb8878d9452ca6b4ef0b6f3f105030e735dc59320c4991e0ae5af33c0dcd7092cd9f37ce3cc31bcb68f890b691423dbed08603901f801187de00cf68cbad3ff6ae9b0d574fd449081867438ba72b42721b2bcea6a318c7651b57095358324f5eb068e6efea560341535a3fea74ca1e7825ab68c3a290e3e8a85bca958f065713cc53cb7db904e3a7933a06b7c00fe7b1d632c2c313b496", 0xe7, 0x1, 0x0, 0x1, r0}]) 15:29:46 executing program 4: r0 = socket(0x28, 0x800, 0x68770a22) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000080)={0x3f, {{0xa, 0x4e20, 0x1c9e, @remote, 0x7}}}, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000140)={'raw\x00', 0x2, [{}, {}]}, 0x48) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x90001, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000200)={'mangle\x00', 0x3, [{}, {}, {}]}, 0x58) r3 = socket(0x22, 0x5, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000280)=0x4, 0x4) r4 = socket(0x22, 0x2, 0xb0) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f00000002c0)={0x1}, 0x4) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/custom1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000480)={0x1c, 0x0, &(0x7f0000000340)=[@clear_death={0x400c630f, 0x2}, @exit_looper, @increfs={0x40046304, 0x3}], 0xc8, 0x0, &(0x7f0000000380)="945a2582e97415526fcffb6e6ffc35829949b698c3ab57af9a20f64c973221b872f70463e96f9459c9dc1a30c8fe2fcedd4c36b65debe6c3eaccc3b81ff761ff0b1fd2ebecc5ff0af654bcfcc2cf0e00025660a75887f400e42c45b0439f8d01542f5794e90ae9dde422c38e6b61b79ffe7c8a7b1be9a30f902d3fa6bb4907a4668dce3fd1165d0b5dc275f5f01f470c7c6a746b18dddc84bf4b89b00ddb68d4e9fe77f60f17a7f1422d8feb01ca02b59447c5bce41060d28dae608fad37fbd9942b955be74daca8"}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000005c0)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/156, 0x9c, 0x1, &(0x7f0000000580)=""/35, 0x23}, &(0x7f0000000600)=0x40) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000640)={0x80000001, {{0xa, 0x4e21, 0x10000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x200}}}, 0x88) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index=0x4, 0x0, 0x0, 0x6, 0x0, 0x0, {0x0, 0x0, r4}}, 0x80) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r6, 0x29, 0xcd, &(0x7f0000000740)={{0xa, 0x4e24, 0x2, @local, 0x3}, {0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x6, [0x6, 0x6, 0x8, 0x2, 0x23a9, 0x81, 0x27d1, 0xfffffffe]}, 0x5c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000840)={'ip6gre0\x00', &(0x7f00000007c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x6, 0x1, 0x3f, @mcast1, @empty, 0x7800, 0x80, 0x1, 0xd19a}}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000880)={@local, 0x1c, r7}) 15:29:46 executing program 7: setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)={0x5e, 0x2, 0x1, 0x3, 0x0, [@dev={0xfe, 0x80, '\x00', 0x10}]}, 0x18) r0 = syz_io_uring_complete(0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14, 0x80800) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000000c0)={@local, r1}, 0x14) getsockname$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000140)=0x1c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4) r4 = socket(0x21, 0x4, 0x401) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f00000002c0)={0x1, {{0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}}}, 0x88) setsockopt$inet6_buf(r4, 0x29, 0xdb, &(0x7f0000000380)="e0b164be7942560e0ef6298eb798f9af0f7faad8459c120e15db44d6355d096b94333aad7459675c54de1aaaf09bf6ab0a8955d07cf9ad8d84a32817ac2d75aec9959d9a7714c633a1ace7fe3079c4e413dd7d8e4adeaa2a96e5b0ef522f", 0x5e) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000500)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000540)={@private2={0xfc, 0x2, '\x00', 0x1}, r5}, 0x14) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8}, 0x20002800) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000006c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x29, 0x2d, &(0x7f0000000800)={0x0, {{0xa, 0x4e22, 0x80, @remote, 0x54a58250}}}, 0x88) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000ac0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a80)={&(0x7f0000000900)={0x148, 0x13, 0x1, 0x70bd26, 0x25dfdbff, {0x5, 0x60, 0xf4, 0xd6, {0x4e22, 0x4e21, [0x6, 0x5, 0x5, 0x4], [0x401, 0x800, 0xd0b, 0x4780ac06], 0x0, [0x6, 0x1f]}, 0x4, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x81, 0x1, "ac3c6c9807a01910bef05b51585092ca051702e63fb24c836e08b86e5f63cd32a73299862b0608b52b8c03f5a348656dca60350e75e6a81533358395de6ee1333ab8a1426e058d09d4d21f71eeeffbe3b47b6cc998f529647ab76faaaec3de4b0a89b7f96a84cfbf3fa0ba2d7b18dc1e939d5ee83bc79181144c3d13b5"}, @INET_DIAG_REQ_BYTECODE={0x75, 0x1, "31d5fbd06ea3a7f821defa49fa6a4d8b7e9f2d097b5ed55043216ed4ea4b1558da8ec748a8f9d6ded8dc061e9419ba8f18e5642877cfca5520b72b17f0c7ead97af28baa7b96e6181016dd3eefe52ade56d88d64462803e51639a134ec3fca447bb3a986c58fed7b57dc24a4e7286a0c8f"}]}, 0x148}, 0x1, 0x0, 0x0, 0x40000}, 0x41) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000b00)=[@mss={0x2, 0x4}, @timestamp, @window={0x3, 0x401}, @window={0x3, 0x1, 0xc35f}], 0x4) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x38, r3, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x38}}, 0x0) 15:29:46 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0xf8, 0x0, &(0x7f0000000380)=[@enter_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0x7, 0x1, 0x7}, @fd, @flat=@handle={0x73682a85, 0xb}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}}, @register_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/66, 0x42, 0x1, 0x32}, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x34}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x40}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x60, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/170, 0xaa, 0x1, 0x22}, @flat=@weak_binder={0x77622a85, 0xa, 0x2}, @fda={0x66646185, 0xa, 0x4, 0x2a}}, &(0x7f0000000340)={0x0, 0x28, 0x40}}}, @dead_binder_done], 0xfb, 0x0, &(0x7f0000000480)="867e5e8549e01f61e324db6a49b7fbba0ba9627b7ef97b2e7191ae2b10dffa462b90c2a4946551efb146e957821842d7df820d7f6398ecd1d1a4114d85758708a607826096e0f8f4d4da1b7635885eb570e884683ea03d28588d46544f9aee7ea507ee8d5341ddb8c62b60798ddce6a0821b105b713cf4b1d698cccfb61cbd7a34ec8046f53501af7bae3cfc35375a2564e209ca15dad52cc8939f482282d53d96a266560dde6db82d8d95e356bd823a52bca09a8a4426f0146c98d0561cfee3cbdb31520485170ef6e9fb2ea3a2cc40545e50e90762969190b3983d6775430ae751bba7b057a85b37b3ded67a6784b1e752aca50ecdf14c06a86d"}) io_submit(0x0, 0x0, &(0x7f00000005c0)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x10000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000840)={0x20, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x98, "e333e58853c5fa"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001840)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001a40)={{0x0, 0xa3, 0x190b, 0x4, 0xdc3, 0x7, 0x9, 0x9f, 0xfffffffb, 0x200, 0x3f, 0x1, 0xffff, 0x400, 0x10000000}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001ac0)={{0x0, 0x9, 0x8, 0xffffffff, 0x3, 0x1, 0x1, 0x9, 0xf946, 0x7, 0x4, 0xd48, 0x3, 0x7fffffff, 0xfffffffffffff001}, 0x8, [0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001b40)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001d40)={{0x0, 0x40, 0x7fff, 0x2, 0x101, 0x4, 0x7fff, 0x1, 0xfffffe00, 0x35, 0x3ff, 0x1ff, 0x3, 0xca, 0x1}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002d40)={0x1000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x3f, "4dd071380578dc"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000003d40)={{0x0, 0x6, 0x0, 0x7, 0x5, 0xfffffffffffffffc, 0x7, 0x4, 0xff, 0x20, 0x1ff, 0x4000, 0x2ae, 0x5, 0xff}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000004d40)={0x7fffffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x3f, "ce40b9754ac8e1"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000005d40)={0x1ff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x3, "957c6398ec9700"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000006d40)={{0x0, 0xfffffffffffffffd, 0xff, 0x0, 0xd2e8, 0x8b3f, 0x4, 0xf936, 0x2, 0x5, 0x6, 0xd69, 0x2, 0x7, 0x200}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000007d40)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000007f40)={{0x0, 0x4, 0x5, 0x7, 0xffffffff, 0x3, 0x10000, 0x75, 0x0, 0x80000001, 0x80000000, 0x6, 0x526d45fb, 0x9, 0xfff}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000008f40)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000009140)={0x6e4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xd0, "38561831562967"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000068cc0)={0x6, [{r1}, {}, {0x0, r2}, {0x0, r3}, {}, {r4}, {r5, r6}, {r7}, {0x0, r8}, {r9}, {r10}, {}, {0x0, r11}, {r12}, {r13}, {r14}, {}, {0x0, r15}, {r16}], 0x1, "6d3cdc6e8fb7e6"}) 15:29:46 executing program 1: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"d4c0cadc7862c32b72c9fd760c05ca23", 0x0, 0x0, {0x0, 0x8}, {0x3ff}, 0x1000, [0x6, 0x9, 0x100000000, 0x35e3, 0x200, 0x2, 0xffffffffffff7fff, 0x10000, 0x8, 0x4, 0xff, 0x7049b48f, 0xfff, 0xffffffffffffff01, 0x7, 0x10000]}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3}, 0x1) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"87ccb543c14d08e63a7b0ba432b0a614", r0, r0, {0x7, 0xffffffff}, {0x5, 0x333e}, 0x8, [0x0, 0x4, 0x10001, 0x6, 0x800, 0x3, 0x7, 0x5d, 0x16b7, 0x9, 0x8d76, 0xfffffffffffffff9, 0x0, 0x4, 0x80, 0x5]}) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14, 0x80000) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@ipv4={'\x00', '\xff\xff', @empty}, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5, 0x0, 0x401, 0x100, 0x2, 0x40000040, r2}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@rand_addr=' \x01\x00', @mcast1, @loopback, 0x8, 0x3, 0x5, 0x0, 0x3, 0x0, r2}) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000003c0), 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_DEL_MFC(r4, 0x29, 0xcd, &(0x7f0000000440)={{0xa, 0x4e20, 0x1ff, @local, 0xb07f}, {0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffffffff}, 0x7f, [0x8, 0xfffff801, 0x5, 0xef, 0x7fffffff, 0x581, 0x2, 0xc6b5]}, 0x5c) r5 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_tcp_int(r5, 0x6, 0x4, &(0x7f00000004c0)=0x1, 0x4) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000500)={@local, @remote, @ipv4={'\x00', '\xff\xff', @remote}, 0x5, 0x6, 0xc4, 0x400, 0xffff, 0xa4, r2}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000580)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000000b00)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000600)={0x4b4, 0x13, 0x100, 0x70bd28, 0x25dfdbfe, {0x12, 0x1, 0x2, 0x20, {0x4e23, 0x4e21, [0x1ff, 0x6, 0x83, 0x9], [0x4, 0x400, 0x0, 0x1000], r2, [0x0, 0x7d70dae6]}, 0x20000000, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x98, 0x1, "059b6a667558d3c66dcf091a25471766a25b0cac36aca9a4484e9cf401819e296006c7f789ff62840ca516b9d2b290b8f16d8bec76ec6ac61f77e08ec20bb666a50c0cff81d4c90cd0f45dd00df1748717a64fc96306753dda1a1690d6627aa8bdb85291d11f65631909ed0d9ed5cfb8427d1be0fa9894541309819413fcd530ee4df011dc66387e4914493cf585024d169d8e6f"}, @INET_DIAG_REQ_BYTECODE={0x13, 0x1, "dc71715d25ba6ee08beeddda723dfc"}, @INET_DIAG_REQ_BYTECODE={0xcd, 0x1, "49add60b18e0036c0a16eaf44a81abdb4e83421fb342bdf32d55ea02922c16d837b1f662fadad3afb9280c940af20c1ed5998cb3bfc2b8a1d31b6c79a464e6a88709186dbe1a4895d6222dec8a020816fa710235be1f8b1864b2c79e751b428d9d436f0e38b698deb468eb3ffdb7f43c819480879640233f63742e7104cd75e0784cec9db1be334ce53faa052c5e196964b6279bf0d27f70e2869c6bba9755305d5f6f1658460001f8f40e006f69f198bace92546de1d325b71ad679e02838afc66b6cae2237a10126"}, @INET_DIAG_REQ_BYTECODE={0xb8, 0x1, "24a43a7172daa0a345e28865db7af0d7898b92bbadd1c7d6b8eaa6f8a05795a8ecf9f7d29640c57e09379e74e26e83a82c285fca9fdaf29b4f4aae5457914a8782439e65c710b1105e81944504464bbee0abc77d38d56c5c830c1e3e14fa725f50551e0f2aa47c82a2ae0a548b040f0b993cd0c03932296826466e0e20a25e825fa34febdfb68c70a0bdd4857248b449d14c7dfa5081257e27fb0ed8841595203227e8b9a9edf6dfa6e71cd4ecc481a48b44fed9"}, @INET_DIAG_REQ_BYTECODE={0xf3, 0x1, "9f72c4ce3bf66789cc8bf81aafe5763da16a6419845ecdd391d034940dc78785af0c6264c1e6e935f8c9d58cb11ac66ec7fd2825b780583b16da3e8a1a8b786e05b7ca7b62c66210cd326337219a250dccc4580ae7326c1612c65ee9c70b69655969f39e86a63e2f979fba2ea591e389df04c8ae490a2f039f469bf9473abbe351b505b9d1fe51e9e0b25b71fa58ff69549b62f6671940c4c1ba46c2a84564728b16d9174220eecef8b88e153ca5dacd20687a0a8075ad66f2ac7ea01790fbccbee7c6fc6134c5071d5baf170d9ca622eaa3f34e4a27cc0d7a5b04bfb9f97ab6a7c9cff4f49097548f9cad923f18ac"}, @INET_DIAG_REQ_BYTECODE={0x2f, 0x1, "6e57e41e4bb384c0a698cef4b0dfdfd1a07924d0b199ab872feb015c181629b5e47e71a13949136345bb98"}, @INET_DIAG_REQ_BYTECODE={0x9e, 0x1, "593ed5c78e541f262c3a4c4e817da74e842da407028b248fce2e5a07fbdf1af402edbc9d717eae59eeed9c77bc98f0423eaefc6be3226b6e7f65b8d1f0b7245196233daeb7306837eeef01c5248af4b6049d9eaef7002fa789d797df73319fe2c4fd95f3b47dcd6df2d6b9ca962df181c4bc568fd49312fb7fac088dd004ab8cbe7a363394e666ee28edd76791c9efccac8089a58956ebf59081"}, @INET_DIAG_REQ_BYTECODE={0x70, 0x1, "6ea43988ed441e20c79941a15549a58d5d24d1bd36a1b35de7547742353ed6cc6b6a73426bb5cf187a0ffbac0f1ab2d43b5fd1c77219efc224cabafa0bdd107cc376f449f02f066354a3237fb4eeea6adc4ae50ae4c214ae755a0f7cbb75ab1587cd5c81efd6830302901edc"}]}, 0x4b4}, 0x1, 0x0, 0x0, 0x20000000}, 0x8800) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f0000000b40)={0x1}, 0x4) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r6, 0x89fa, &(0x7f0000000c00)={'ip6gre0\x00', &(0x7f0000000b80)={'syztnl0\x00', r2, 0x4, 0x6, 0x3, 0x8000, 0x2, @loopback, @mcast1, 0x7, 0x40, 0x9, 0x200}}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000c40)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000c80)={0x3b, 0xd, '\x00', [@enc_lim={0x4, 0x1, 0x7f}, @ra={0x5, 0x2, 0x7f}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x2, 0xc, 0x7f, 0x4, [0x2, 0x3, 0xffffffffffff896e, 0x3, 0xf17, 0x400]}}, @ra={0x5, 0x2, 0x1}, @jumbo={0xc2, 0x4, 0x4}, @enc_lim, @jumbo={0xc2, 0x4, 0x2d}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, 0x78) 15:29:46 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x800, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000080), 0xd1dc, 0x28000) setsockopt$inet6_tcp_int(r2, 0x6, 0x3, &(0x7f00000000c0)=0x3, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x4) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000140)={0x41, {{0xa, 0x4e22, 0x40, @mcast1, 0x4}}, 0x0, 0x7, [{{0xa, 0x4e21, 0x8000, @private0, 0x7fff}}, {{0xa, 0x4e24, 0x2, @remote, 0x800}}, {{0xa, 0x4e21, 0x0, @mcast2, 0x7}}, {{0xa, 0x4e23, 0x6, @local, 0x20}}, {{0xa, 0x4e20, 0xef8, @loopback, 0x1}}, {{0xa, 0x4e20, 0x5, @local, 0x1}}, {{0xa, 0x4e24, 0x8, @mcast1, 0xda}}]}, 0x410) r3 = syz_open_dev$mouse(&(0x7f0000000580), 0x1000, 0x400) ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f00000005c0)) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000600), 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000640)={0xfffffffffffffffb, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x81, "73777614b01e26"}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001640)={{0x0, 0x9, 0x2, 0xff, 0x3, 0x2, 0x3, 0x1ff, 0x3f, 0x1f, 0x5, 0x8, 0x3, 0x81, 0xa1}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000002640)={{0x0, 0x3, 0x3ff, 0x7fff, 0x6, 0x8, 0x80, 0x7, 0x9, 0x4d, 0x5, 0x4, 0x2, 0x9, 0x100000000}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000026c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000028c0)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000002ac0)={0x7fff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xff, "461807b49ae465"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000003ac0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000003cc0)={{0x0, 0x1, 0x7, 0x9, 0x1, 0x7b, 0x3, 0xb6a, 0x400, 0x1, 0x80, 0x4, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000004cc0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000004ec0)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "f93bd29bd859bf"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000058640)={0x9, [{0x0, r4}, {}, {r5}, {}, {r6}, {0x0, r7}, {r8}, {}, {0x0, r9}, {}, {}, {r10}, {r11}, {0x0, r12}, {0x0, r13}], 0x3, "38cf153eb8069d"}) 15:29:47 executing program 6: getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl0\x00', r1, 0x4, 0xbe, 0x3, 0x8, 0x2, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x1, 0x38bc, 0x3}}) r3 = accept$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) accept$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f00000002c0)={@mcast2, 0x60, r4}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x382c6ac8}}, './file0\x00'}) getsockopt$inet_tcp_buf(r5, 0x6, 0x1c, &(0x7f0000000340)=""/175, &(0x7f0000000400)=0xaf) accept$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) accept$packet(r0, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000500)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000580)={'ip6tnl0\x00', r2, 0x2f, 0xff, 0x6, 0x400, 0x12, @private1, @empty, 0x8000, 0x20, 0xfffffffc, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'ip6_vti0\x00', r6, 0x4, 0x40, 0x80, 0x1f, 0x53, @remote, @mcast2, 0x40, 0x7, 0x6}}) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000700)={0x3, 0x6}, 0x4) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r7, 0x894b, &(0x7f0000000780)) r8 = memfd_secret(0x80000) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f00000007c0)={0x3, 0x1}, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000800)={0x5, {{0xa, 0x4e23, 0x9, @mcast2, 0x7fffffff}}}, 0x88) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) sendmsg$inet6(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)}, 0x20048004) 15:29:47 executing program 5: ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000000)={0x0, 0x1ff, 0x8798}) mq_timedsend(0xffffffffffffffff, &(0x7f0000000040)="48f82bdea935cfba16267b6f7306e05a79674cd19b67f551", 0x18, 0x6, &(0x7f0000000080)={0x0, 0x989680}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) syz_io_uring_setup(0x20f, &(0x7f0000000100)={0x0, 0xc87d, 0x20, 0x2, 0x52, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) write$selinux_attr(r0, &(0x7f0000000200)='system_u:object_r:system_dbusd_var_lib_t:s0\x00', 0x2c) r1 = accept4$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000003c0), 0x1e5dc0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000480)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x80, r1, &(0x7f00000002c0)="8a409233828523bdcd6d501faa5e1460f31273cb0e90f906deeaa187a3e4d01b9eb516edcf920909c5f9366342524eccc49ff4ff3cf3dceb24521763b412c9fa06889edda15de61e84b61e520f8fbe63ea33743cb3fa7c13448db3cab1c1f282d058de3c599c4dee20a44fac6d2a98440c797b0776b4a9eb851fd7d6e6436e6a1db16e60f8ec9ddc062899df0f4d6e3d66de46670f14ad1ac6104fa708252a7462c043e34ecf5bcbc574dfee79561dc46553cc34", 0xb4, 0x0, 0x0, 0x0, r0}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2, 0x7, r2, &(0x7f0000000400)="ad71d632f4", 0x5, 0x9, 0x0, 0x2, r0}]) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000004c0)={0x0, 0x0, 0xffffffffffffffff, 0x4}) r3 = io_uring_setup(0x4c8e, &(0x7f0000000500)={0x0, 0x9d84, 0x1c, 0x2, 0x2fa, 0x0, r0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000580)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e20, 0x40, @empty, 0xd79b}}, 0x0, 0x0, 0x16, 0x0, "85d1191a58a2f27de4b44902caab4f42f235350c98f6489f2104d03d0cc56fb000dcef26f89f8ea46e2603754aeedb6f43b20d5c02bdf413d1f79ebdff0cb32090501722e56a785934df82838a5adefb"}, 0xd8) io_setup(0x7, &(0x7f0000000880)=0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000a80)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) io_submit(r7, 0x4, &(0x7f0000000cc0)=[&(0x7f0000000940)={0x0, 0x0, 0x0, 0x5, 0x20, r2, &(0x7f00000008c0)="0da7c1c104a5bdd590baa52dbb623f18626a0ce931f33251569345f0511a79fe9b84fe019489a72822f092ebc936812f4bca334d984b0afa9ab7443a32564ab3427a56d4be44a70e103ff44f", 0x4c, 0x7, 0x0, 0x1, r2}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x6, 0x5, r1, &(0x7f0000000980)="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", 0xfb, 0x4, 0x0, 0x0, r8}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x7, 0x0, r9, &(0x7f0000000b00), 0x0, 0x100000001, 0x0, 0x1, r2}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x7, 0x3, r3, &(0x7f0000000b80)="0fb2829617d6993a6e18a9a36c5f43050533b08bc7362076e39b70219615a58b12d72664b5d794fbd2a176080c971cbbb0ce3a88e6b464201baaf13a6e51580988cfcdc7e39e4da737461f51cbac8d01cb8878d9452ca6b4ef0b6f3f105030e735dc59320c4991e0ae5af33c0dcd7092cd9f37ce3cc31bcb68f890b691423dbed08603901f801187de00cf68cbad3ff6ae9b0d574fd449081867438ba72b42721b2bcea6a318c7651b57095358324f5eb068e6efea560341535a3fea74ca1e7825ab68c3a290e3e8a85bca958f065713cc53cb7db904e3a7933a06b7c00fe7b1d632c2c313b496", 0xe7, 0x1, 0x0, 0x1, r0}]) 15:29:47 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x800, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000080), 0xd1dc, 0x28000) setsockopt$inet6_tcp_int(r2, 0x6, 0x3, &(0x7f00000000c0)=0x3, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x4) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000140)={0x41, {{0xa, 0x4e22, 0x40, @mcast1, 0x4}}, 0x0, 0x7, [{{0xa, 0x4e21, 0x8000, @private0, 0x7fff}}, {{0xa, 0x4e24, 0x2, @remote, 0x800}}, {{0xa, 0x4e21, 0x0, @mcast2, 0x7}}, {{0xa, 0x4e23, 0x6, @local, 0x20}}, {{0xa, 0x4e20, 0xef8, @loopback, 0x1}}, {{0xa, 0x4e20, 0x5, @local, 0x1}}, {{0xa, 0x4e24, 0x8, @mcast1, 0xda}}]}, 0x410) r3 = syz_open_dev$mouse(&(0x7f0000000580), 0x1000, 0x400) ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f00000005c0)) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000600), 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000640)={0xfffffffffffffffb, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x81, "73777614b01e26"}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001640)={{0x0, 0x9, 0x2, 0xff, 0x3, 0x2, 0x3, 0x1ff, 0x3f, 0x1f, 0x5, 0x8, 0x3, 0x81, 0xa1}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000002640)={{0x0, 0x3, 0x3ff, 0x7fff, 0x6, 0x8, 0x80, 0x7, 0x9, 0x4d, 0x5, 0x4, 0x2, 0x9, 0x100000000}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000026c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000028c0)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000002ac0)={0x7fff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xff, "461807b49ae465"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000003ac0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000003cc0)={{0x0, 0x1, 0x7, 0x9, 0x1, 0x7b, 0x3, 0xb6a, 0x400, 0x1, 0x80, 0x4, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000004cc0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000004ec0)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "f93bd29bd859bf"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000058640)={0x9, [{0x0, r4}, {}, {r5}, {}, {r6}, {0x0, r7}, {r8}, {}, {0x0, r9}, {}, {}, {r10}, {r11}, {0x0, r12}, {0x0, r13}], 0x3, "38cf153eb8069d"}) 15:29:47 executing program 1: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"d4c0cadc7862c32b72c9fd760c05ca23", 0x0, 0x0, {0x0, 0x8}, {0x3ff}, 0x1000, [0x6, 0x9, 0x100000000, 0x35e3, 0x200, 0x2, 0xffffffffffff7fff, 0x10000, 0x8, 0x4, 0xff, 0x7049b48f, 0xfff, 0xffffffffffffff01, 0x7, 0x10000]}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3}, 0x1) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"87ccb543c14d08e63a7b0ba432b0a614", r0, r0, {0x7, 0xffffffff}, {0x5, 0x333e}, 0x8, [0x0, 0x4, 0x10001, 0x6, 0x800, 0x3, 0x7, 0x5d, 0x16b7, 0x9, 0x8d76, 0xfffffffffffffff9, 0x0, 0x4, 0x80, 0x5]}) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14, 0x80000) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@ipv4={'\x00', '\xff\xff', @empty}, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5, 0x0, 0x401, 0x100, 0x2, 0x40000040, r2}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@rand_addr=' \x01\x00', @mcast1, @loopback, 0x8, 0x3, 0x5, 0x0, 0x3, 0x0, r2}) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000003c0), 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_DEL_MFC(r4, 0x29, 0xcd, &(0x7f0000000440)={{0xa, 0x4e20, 0x1ff, @local, 0xb07f}, {0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffffffff}, 0x7f, [0x8, 0xfffff801, 0x5, 0xef, 0x7fffffff, 0x581, 0x2, 0xc6b5]}, 0x5c) r5 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_tcp_int(r5, 0x6, 0x4, &(0x7f00000004c0)=0x1, 0x4) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000500)={@local, @remote, @ipv4={'\x00', '\xff\xff', @remote}, 0x5, 0x6, 0xc4, 0x400, 0xffff, 0xa4, r2}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000580)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000000b00)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000600)={0x4b4, 0x13, 0x100, 0x70bd28, 0x25dfdbfe, {0x12, 0x1, 0x2, 0x20, {0x4e23, 0x4e21, [0x1ff, 0x6, 0x83, 0x9], [0x4, 0x400, 0x0, 0x1000], r2, [0x0, 0x7d70dae6]}, 0x20000000, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x98, 0x1, "059b6a667558d3c66dcf091a25471766a25b0cac36aca9a4484e9cf401819e296006c7f789ff62840ca516b9d2b290b8f16d8bec76ec6ac61f77e08ec20bb666a50c0cff81d4c90cd0f45dd00df1748717a64fc96306753dda1a1690d6627aa8bdb85291d11f65631909ed0d9ed5cfb8427d1be0fa9894541309819413fcd530ee4df011dc66387e4914493cf585024d169d8e6f"}, @INET_DIAG_REQ_BYTECODE={0x13, 0x1, "dc71715d25ba6ee08beeddda723dfc"}, @INET_DIAG_REQ_BYTECODE={0xcd, 0x1, "49add60b18e0036c0a16eaf44a81abdb4e83421fb342bdf32d55ea02922c16d837b1f662fadad3afb9280c940af20c1ed5998cb3bfc2b8a1d31b6c79a464e6a88709186dbe1a4895d6222dec8a020816fa710235be1f8b1864b2c79e751b428d9d436f0e38b698deb468eb3ffdb7f43c819480879640233f63742e7104cd75e0784cec9db1be334ce53faa052c5e196964b6279bf0d27f70e2869c6bba9755305d5f6f1658460001f8f40e006f69f198bace92546de1d325b71ad679e02838afc66b6cae2237a10126"}, @INET_DIAG_REQ_BYTECODE={0xb8, 0x1, "24a43a7172daa0a345e28865db7af0d7898b92bbadd1c7d6b8eaa6f8a05795a8ecf9f7d29640c57e09379e74e26e83a82c285fca9fdaf29b4f4aae5457914a8782439e65c710b1105e81944504464bbee0abc77d38d56c5c830c1e3e14fa725f50551e0f2aa47c82a2ae0a548b040f0b993cd0c03932296826466e0e20a25e825fa34febdfb68c70a0bdd4857248b449d14c7dfa5081257e27fb0ed8841595203227e8b9a9edf6dfa6e71cd4ecc481a48b44fed9"}, @INET_DIAG_REQ_BYTECODE={0xf3, 0x1, "9f72c4ce3bf66789cc8bf81aafe5763da16a6419845ecdd391d034940dc78785af0c6264c1e6e935f8c9d58cb11ac66ec7fd2825b780583b16da3e8a1a8b786e05b7ca7b62c66210cd326337219a250dccc4580ae7326c1612c65ee9c70b69655969f39e86a63e2f979fba2ea591e389df04c8ae490a2f039f469bf9473abbe351b505b9d1fe51e9e0b25b71fa58ff69549b62f6671940c4c1ba46c2a84564728b16d9174220eecef8b88e153ca5dacd20687a0a8075ad66f2ac7ea01790fbccbee7c6fc6134c5071d5baf170d9ca622eaa3f34e4a27cc0d7a5b04bfb9f97ab6a7c9cff4f49097548f9cad923f18ac"}, @INET_DIAG_REQ_BYTECODE={0x2f, 0x1, "6e57e41e4bb384c0a698cef4b0dfdfd1a07924d0b199ab872feb015c181629b5e47e71a13949136345bb98"}, @INET_DIAG_REQ_BYTECODE={0x9e, 0x1, "593ed5c78e541f262c3a4c4e817da74e842da407028b248fce2e5a07fbdf1af402edbc9d717eae59eeed9c77bc98f0423eaefc6be3226b6e7f65b8d1f0b7245196233daeb7306837eeef01c5248af4b6049d9eaef7002fa789d797df73319fe2c4fd95f3b47dcd6df2d6b9ca962df181c4bc568fd49312fb7fac088dd004ab8cbe7a363394e666ee28edd76791c9efccac8089a58956ebf59081"}, @INET_DIAG_REQ_BYTECODE={0x70, 0x1, "6ea43988ed441e20c79941a15549a58d5d24d1bd36a1b35de7547742353ed6cc6b6a73426bb5cf187a0ffbac0f1ab2d43b5fd1c77219efc224cabafa0bdd107cc376f449f02f066354a3237fb4eeea6adc4ae50ae4c214ae755a0f7cbb75ab1587cd5c81efd6830302901edc"}]}, 0x4b4}, 0x1, 0x0, 0x0, 0x20000000}, 0x8800) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f0000000b40)={0x1}, 0x4) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r6, 0x89fa, &(0x7f0000000c00)={'ip6gre0\x00', &(0x7f0000000b80)={'syztnl0\x00', r2, 0x4, 0x6, 0x3, 0x8000, 0x2, @loopback, @mcast1, 0x7, 0x40, 0x9, 0x200}}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000c40)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000c80)={0x3b, 0xd, '\x00', [@enc_lim={0x4, 0x1, 0x7f}, @ra={0x5, 0x2, 0x7f}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x2, 0xc, 0x7f, 0x4, [0x2, 0x3, 0xffffffffffff896e, 0x3, 0xf17, 0x400]}}, @ra={0x5, 0x2, 0x1}, @jumbo={0xc2, 0x4, 0x4}, @enc_lim, @jumbo={0xc2, 0x4, 0x2d}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, 0x78) 15:29:57 executing program 7: setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)={0x5e, 0x2, 0x1, 0x3, 0x0, [@dev={0xfe, 0x80, '\x00', 0x10}]}, 0x18) r0 = syz_io_uring_complete(0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14, 0x80800) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000000c0)={@local, r1}, 0x14) getsockname$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000140)=0x1c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4) r4 = socket(0x21, 0x4, 0x401) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f00000002c0)={0x1, {{0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}}}, 0x88) setsockopt$inet6_buf(r4, 0x29, 0xdb, &(0x7f0000000380)="e0b164be7942560e0ef6298eb798f9af0f7faad8459c120e15db44d6355d096b94333aad7459675c54de1aaaf09bf6ab0a8955d07cf9ad8d84a32817ac2d75aec9959d9a7714c633a1ace7fe3079c4e413dd7d8e4adeaa2a96e5b0ef522f", 0x5e) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000500)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000540)={@private2={0xfc, 0x2, '\x00', 0x1}, r5}, 0x14) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8}, 0x20002800) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000006c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x29, 0x2d, &(0x7f0000000800)={0x0, {{0xa, 0x4e22, 0x80, @remote, 0x54a58250}}}, 0x88) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000ac0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a80)={&(0x7f0000000900)={0x148, 0x13, 0x1, 0x70bd26, 0x25dfdbff, {0x5, 0x60, 0xf4, 0xd6, {0x4e22, 0x4e21, [0x6, 0x5, 0x5, 0x4], [0x401, 0x800, 0xd0b, 0x4780ac06], 0x0, [0x6, 0x1f]}, 0x4, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x81, 0x1, "ac3c6c9807a01910bef05b51585092ca051702e63fb24c836e08b86e5f63cd32a73299862b0608b52b8c03f5a348656dca60350e75e6a81533358395de6ee1333ab8a1426e058d09d4d21f71eeeffbe3b47b6cc998f529647ab76faaaec3de4b0a89b7f96a84cfbf3fa0ba2d7b18dc1e939d5ee83bc79181144c3d13b5"}, @INET_DIAG_REQ_BYTECODE={0x75, 0x1, "31d5fbd06ea3a7f821defa49fa6a4d8b7e9f2d097b5ed55043216ed4ea4b1558da8ec748a8f9d6ded8dc061e9419ba8f18e5642877cfca5520b72b17f0c7ead97af28baa7b96e6181016dd3eefe52ade56d88d64462803e51639a134ec3fca447bb3a986c58fed7b57dc24a4e7286a0c8f"}]}, 0x148}, 0x1, 0x0, 0x0, 0x40000}, 0x41) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000b00)=[@mss={0x2, 0x4}, @timestamp, @window={0x3, 0x401}, @window={0x3, 0x1, 0xc35f}], 0x4) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x38, r3, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x38}}, 0x0) 15:29:57 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0xf8, 0x0, &(0x7f0000000380)=[@enter_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0x7, 0x1, 0x7}, @fd, @flat=@handle={0x73682a85, 0xb}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}}, @register_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/66, 0x42, 0x1, 0x32}, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x34}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x40}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x60, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/170, 0xaa, 0x1, 0x22}, @flat=@weak_binder={0x77622a85, 0xa, 0x2}, @fda={0x66646185, 0xa, 0x4, 0x2a}}, &(0x7f0000000340)={0x0, 0x28, 0x40}}}, @dead_binder_done], 0xfb, 0x0, &(0x7f0000000480)="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"}) io_submit(0x0, 0x0, &(0x7f00000005c0)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x10000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000840)={0x20, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x98, "e333e58853c5fa"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001840)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001a40)={{0x0, 0xa3, 0x190b, 0x4, 0xdc3, 0x7, 0x9, 0x9f, 0xfffffffb, 0x200, 0x3f, 0x1, 0xffff, 0x400, 0x10000000}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001ac0)={{0x0, 0x9, 0x8, 0xffffffff, 0x3, 0x1, 0x1, 0x9, 0xf946, 0x7, 0x4, 0xd48, 0x3, 0x7fffffff, 0xfffffffffffff001}, 0x8, [0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001b40)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001d40)={{0x0, 0x40, 0x7fff, 0x2, 0x101, 0x4, 0x7fff, 0x1, 0xfffffe00, 0x35, 0x3ff, 0x1ff, 0x3, 0xca, 0x1}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002d40)={0x1000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x3f, "4dd071380578dc"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000003d40)={{0x0, 0x6, 0x0, 0x7, 0x5, 0xfffffffffffffffc, 0x7, 0x4, 0xff, 0x20, 0x1ff, 0x4000, 0x2ae, 0x5, 0xff}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000004d40)={0x7fffffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x3f, "ce40b9754ac8e1"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000005d40)={0x1ff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x3, "957c6398ec9700"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000006d40)={{0x0, 0xfffffffffffffffd, 0xff, 0x0, 0xd2e8, 0x8b3f, 0x4, 0xf936, 0x2, 0x5, 0x6, 0xd69, 0x2, 0x7, 0x200}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000007d40)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000007f40)={{0x0, 0x4, 0x5, 0x7, 0xffffffff, 0x3, 0x10000, 0x75, 0x0, 0x80000001, 0x80000000, 0x6, 0x526d45fb, 0x9, 0xfff}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000008f40)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000009140)={0x6e4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xd0, "38561831562967"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000068cc0)={0x6, [{r1}, {}, {0x0, r2}, {0x0, r3}, {}, {r4}, {r5, r6}, {r7}, {0x0, r8}, {r9}, {r10}, {}, {0x0, r11}, {r12}, {r13}, {r14}, {}, {0x0, r15}, {r16}], 0x1, "6d3cdc6e8fb7e6"}) 15:29:57 executing program 6: getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl0\x00', r1, 0x4, 0xbe, 0x3, 0x8, 0x2, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x1, 0x38bc, 0x3}}) r3 = accept$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) accept$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f00000002c0)={@mcast2, 0x60, r4}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x382c6ac8}}, './file0\x00'}) getsockopt$inet_tcp_buf(r5, 0x6, 0x1c, &(0x7f0000000340)=""/175, &(0x7f0000000400)=0xaf) accept$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) accept$packet(r0, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000500)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000580)={'ip6tnl0\x00', r2, 0x2f, 0xff, 0x6, 0x400, 0x12, @private1, @empty, 0x8000, 0x20, 0xfffffffc, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'ip6_vti0\x00', r6, 0x4, 0x40, 0x80, 0x1f, 0x53, @remote, @mcast2, 0x40, 0x7, 0x6}}) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000700)={0x3, 0x6}, 0x4) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r7, 0x894b, &(0x7f0000000780)) r8 = memfd_secret(0x80000) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f00000007c0)={0x3, 0x1}, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000800)={0x5, {{0xa, 0x4e23, 0x9, @mcast2, 0x7fffffff}}}, 0x88) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) sendmsg$inet6(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)}, 0x20048004) 15:29:57 executing program 1: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"d4c0cadc7862c32b72c9fd760c05ca23", 0x0, 0x0, {0x0, 0x8}, {0x3ff}, 0x1000, [0x6, 0x9, 0x100000000, 0x35e3, 0x200, 0x2, 0xffffffffffff7fff, 0x10000, 0x8, 0x4, 0xff, 0x7049b48f, 0xfff, 0xffffffffffffff01, 0x7, 0x10000]}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3}, 0x1) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"87ccb543c14d08e63a7b0ba432b0a614", r0, r0, {0x7, 0xffffffff}, {0x5, 0x333e}, 0x8, [0x0, 0x4, 0x10001, 0x6, 0x800, 0x3, 0x7, 0x5d, 0x16b7, 0x9, 0x8d76, 0xfffffffffffffff9, 0x0, 0x4, 0x80, 0x5]}) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14, 0x80000) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@ipv4={'\x00', '\xff\xff', @empty}, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5, 0x0, 0x401, 0x100, 0x2, 0x40000040, r2}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@rand_addr=' \x01\x00', @mcast1, @loopback, 0x8, 0x3, 0x5, 0x0, 0x3, 0x0, r2}) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000003c0), 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_DEL_MFC(r4, 0x29, 0xcd, &(0x7f0000000440)={{0xa, 0x4e20, 0x1ff, @local, 0xb07f}, {0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffffffff}, 0x7f, [0x8, 0xfffff801, 0x5, 0xef, 0x7fffffff, 0x581, 0x2, 0xc6b5]}, 0x5c) r5 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_tcp_int(r5, 0x6, 0x4, &(0x7f00000004c0)=0x1, 0x4) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000500)={@local, @remote, @ipv4={'\x00', '\xff\xff', @remote}, 0x5, 0x6, 0xc4, 0x400, 0xffff, 0xa4, r2}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000580)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000000b00)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000600)={0x4b4, 0x13, 0x100, 0x70bd28, 0x25dfdbfe, {0x12, 0x1, 0x2, 0x20, {0x4e23, 0x4e21, [0x1ff, 0x6, 0x83, 0x9], [0x4, 0x400, 0x0, 0x1000], r2, [0x0, 0x7d70dae6]}, 0x20000000, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x98, 0x1, "059b6a667558d3c66dcf091a25471766a25b0cac36aca9a4484e9cf401819e296006c7f789ff62840ca516b9d2b290b8f16d8bec76ec6ac61f77e08ec20bb666a50c0cff81d4c90cd0f45dd00df1748717a64fc96306753dda1a1690d6627aa8bdb85291d11f65631909ed0d9ed5cfb8427d1be0fa9894541309819413fcd530ee4df011dc66387e4914493cf585024d169d8e6f"}, @INET_DIAG_REQ_BYTECODE={0x13, 0x1, "dc71715d25ba6ee08beeddda723dfc"}, @INET_DIAG_REQ_BYTECODE={0xcd, 0x1, "49add60b18e0036c0a16eaf44a81abdb4e83421fb342bdf32d55ea02922c16d837b1f662fadad3afb9280c940af20c1ed5998cb3bfc2b8a1d31b6c79a464e6a88709186dbe1a4895d6222dec8a020816fa710235be1f8b1864b2c79e751b428d9d436f0e38b698deb468eb3ffdb7f43c819480879640233f63742e7104cd75e0784cec9db1be334ce53faa052c5e196964b6279bf0d27f70e2869c6bba9755305d5f6f1658460001f8f40e006f69f198bace92546de1d325b71ad679e02838afc66b6cae2237a10126"}, @INET_DIAG_REQ_BYTECODE={0xb8, 0x1, "24a43a7172daa0a345e28865db7af0d7898b92bbadd1c7d6b8eaa6f8a05795a8ecf9f7d29640c57e09379e74e26e83a82c285fca9fdaf29b4f4aae5457914a8782439e65c710b1105e81944504464bbee0abc77d38d56c5c830c1e3e14fa725f50551e0f2aa47c82a2ae0a548b040f0b993cd0c03932296826466e0e20a25e825fa34febdfb68c70a0bdd4857248b449d14c7dfa5081257e27fb0ed8841595203227e8b9a9edf6dfa6e71cd4ecc481a48b44fed9"}, @INET_DIAG_REQ_BYTECODE={0xf3, 0x1, "9f72c4ce3bf66789cc8bf81aafe5763da16a6419845ecdd391d034940dc78785af0c6264c1e6e935f8c9d58cb11ac66ec7fd2825b780583b16da3e8a1a8b786e05b7ca7b62c66210cd326337219a250dccc4580ae7326c1612c65ee9c70b69655969f39e86a63e2f979fba2ea591e389df04c8ae490a2f039f469bf9473abbe351b505b9d1fe51e9e0b25b71fa58ff69549b62f6671940c4c1ba46c2a84564728b16d9174220eecef8b88e153ca5dacd20687a0a8075ad66f2ac7ea01790fbccbee7c6fc6134c5071d5baf170d9ca622eaa3f34e4a27cc0d7a5b04bfb9f97ab6a7c9cff4f49097548f9cad923f18ac"}, @INET_DIAG_REQ_BYTECODE={0x2f, 0x1, "6e57e41e4bb384c0a698cef4b0dfdfd1a07924d0b199ab872feb015c181629b5e47e71a13949136345bb98"}, @INET_DIAG_REQ_BYTECODE={0x9e, 0x1, "593ed5c78e541f262c3a4c4e817da74e842da407028b248fce2e5a07fbdf1af402edbc9d717eae59eeed9c77bc98f0423eaefc6be3226b6e7f65b8d1f0b7245196233daeb7306837eeef01c5248af4b6049d9eaef7002fa789d797df73319fe2c4fd95f3b47dcd6df2d6b9ca962df181c4bc568fd49312fb7fac088dd004ab8cbe7a363394e666ee28edd76791c9efccac8089a58956ebf59081"}, @INET_DIAG_REQ_BYTECODE={0x70, 0x1, "6ea43988ed441e20c79941a15549a58d5d24d1bd36a1b35de7547742353ed6cc6b6a73426bb5cf187a0ffbac0f1ab2d43b5fd1c77219efc224cabafa0bdd107cc376f449f02f066354a3237fb4eeea6adc4ae50ae4c214ae755a0f7cbb75ab1587cd5c81efd6830302901edc"}]}, 0x4b4}, 0x1, 0x0, 0x0, 0x20000000}, 0x8800) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f0000000b40)={0x1}, 0x4) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r6, 0x89fa, &(0x7f0000000c00)={'ip6gre0\x00', &(0x7f0000000b80)={'syztnl0\x00', r2, 0x4, 0x6, 0x3, 0x8000, 0x2, @loopback, @mcast1, 0x7, 0x40, 0x9, 0x200}}) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000c80)={0x3b, 0xd, '\x00', [@enc_lim={0x4, 0x1, 0x7f}, @ra={0x5, 0x2, 0x7f}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x2, 0xc, 0x7f, 0x4, [0x2, 0x3, 0xffffffffffff896e, 0x3, 0xf17, 0x400]}}, @ra={0x5, 0x2, 0x1}, @jumbo={0xc2, 0x4, 0x4}, @enc_lim, @jumbo={0xc2, 0x4, 0x2d}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, 0x78) 15:29:57 executing program 3: setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)="c65ef990d11decc0721c9d23adce23f2c5eaa9cb65ae5ae3c1b9bb150ef68b31fbd3b3e950361d1ff2c329b263451b4d8891d97bc330167d8cd12eb0883839947c1d9a3d71c912fff313a3f3e481b8ffac12036438e4c9cd290e3168453e8459ba7aeee2f99d868ea3baec243651802dfca38e9231379458c48a4d6e49e5f761ac3918733aa2b9af86bc637bd4fb2453177da61394a0f4e28a85d46f9fd8ca53340f948cae06c2520ca7b9e13628b6e0d05b08205dd3d87b4a19ecd4a1bb0e0ca067aa9281b8c6", 0xc7) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000100)=""/132, &(0x7f00000001c0)=0x84) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000200)=""/42, &(0x7f0000000240)=0x2a) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000280)='reno\x00', 0x5) mq_getsetattr(0xffffffffffffffff, &(0x7f00000002c0)={0x8, 0xfffffffffffff68f, 0x7, 0xcc0f}, &(0x7f0000000300)) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000340)={0xdb5, 0x101, 0x401, 0x4}) r0 = syz_open_dev$loop(&(0x7f0000000380), 0x7, 0x80) io_cancel(0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x4, r0, &(0x7f00000003c0)="681b7397c305ba7ff3a311755ce6ca5d719de0f425eeca6c9c6839d11d9127a9f10e733776f6d1153a2db8d503c2bfbb9948c48e2ad0b3be8fd30b4846e3201a5e23e976d5075f7ef1f726e9dd01dd8d308c1b3f78d1ff1f1cbed5d5cbd4501224b19ae30464bb5191a1a160fc19636907c2ac4a076dc6a8f674b3645888c413d514bc24ab007cab90c7790674dcb4a309571df6917ba8453bd9ce9575e2b27b0cea4b9b552075042fb79ba19d7a415ea89b10", 0xb3, 0xfff, 0x0, 0x1}, &(0x7f00000004c0)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000540)) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000580)={{0x0, 0x100000001, 0xffffffff00000000, 0x5, 0x2, 0x3, 0x8, 0x6, 0x1f, 0x0, 0x2, 0x3ff, 0x3, 0x0, 0x1}}) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000001580)) openat$vcsa(0xffffffffffffff9c, &(0x7f00000018c0), 0x105200, 0x0) 15:29:57 executing program 5: ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000000)={0x0, 0x1ff, 0x8798}) mq_timedsend(0xffffffffffffffff, &(0x7f0000000040)="48f82bdea935cfba16267b6f7306e05a79674cd19b67f551", 0x18, 0x6, &(0x7f0000000080)={0x0, 0x989680}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) syz_io_uring_setup(0x20f, &(0x7f0000000100)={0x0, 0xc87d, 0x20, 0x2, 0x52, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) write$selinux_attr(r0, &(0x7f0000000200)='system_u:object_r:system_dbusd_var_lib_t:s0\x00', 0x2c) r1 = accept4$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000003c0), 0x1e5dc0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000480)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x80, r1, &(0x7f00000002c0)="8a409233828523bdcd6d501faa5e1460f31273cb0e90f906deeaa187a3e4d01b9eb516edcf920909c5f9366342524eccc49ff4ff3cf3dceb24521763b412c9fa06889edda15de61e84b61e520f8fbe63ea33743cb3fa7c13448db3cab1c1f282d058de3c599c4dee20a44fac6d2a98440c797b0776b4a9eb851fd7d6e6436e6a1db16e60f8ec9ddc062899df0f4d6e3d66de46670f14ad1ac6104fa708252a7462c043e34ecf5bcbc574dfee79561dc46553cc34", 0xb4, 0x0, 0x0, 0x0, r0}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2, 0x7, r2, &(0x7f0000000400)="ad71d632f4", 0x5, 0x9, 0x0, 0x2, r0}]) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000004c0)={0x0, 0x0, 0xffffffffffffffff, 0x4}) r3 = io_uring_setup(0x4c8e, &(0x7f0000000500)={0x0, 0x9d84, 0x1c, 0x2, 0x2fa, 0x0, r0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000580)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e20, 0x40, @empty, 0xd79b}}, 0x0, 0x0, 0x16, 0x0, "85d1191a58a2f27de4b44902caab4f42f235350c98f6489f2104d03d0cc56fb000dcef26f89f8ea46e2603754aeedb6f43b20d5c02bdf413d1f79ebdff0cb32090501722e56a785934df82838a5adefb"}, 0xd8) io_setup(0x7, &(0x7f0000000880)=0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000a80)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) io_submit(r7, 0x4, &(0x7f0000000cc0)=[&(0x7f0000000940)={0x0, 0x0, 0x0, 0x5, 0x20, r2, &(0x7f00000008c0)="0da7c1c104a5bdd590baa52dbb623f18626a0ce931f33251569345f0511a79fe9b84fe019489a72822f092ebc936812f4bca334d984b0afa9ab7443a32564ab3427a56d4be44a70e103ff44f", 0x4c, 0x7, 0x0, 0x1, r2}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x6, 0x5, r1, &(0x7f0000000980)="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", 0xfb, 0x4, 0x0, 0x0, r8}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x7, 0x0, r9, &(0x7f0000000b00), 0x0, 0x100000001, 0x0, 0x1, r2}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x7, 0x3, r3, &(0x7f0000000b80)="0fb2829617d6993a6e18a9a36c5f43050533b08bc7362076e39b70219615a58b12d72664b5d794fbd2a176080c971cbbb0ce3a88e6b464201baaf13a6e51580988cfcdc7e39e4da737461f51cbac8d01cb8878d9452ca6b4ef0b6f3f105030e735dc59320c4991e0ae5af33c0dcd7092cd9f37ce3cc31bcb68f890b691423dbed08603901f801187de00cf68cbad3ff6ae9b0d574fd449081867438ba72b42721b2bcea6a318c7651b57095358324f5eb068e6efea560341535a3fea74ca1e7825ab68c3a290e3e8a85bca958f065713cc53cb7db904e3a7933a06b7c00fe7b1d632c2c313b496", 0xe7, 0x1, 0x0, 0x1, r0}]) 15:29:57 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x800, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000080), 0xd1dc, 0x28000) setsockopt$inet6_tcp_int(r2, 0x6, 0x3, &(0x7f00000000c0)=0x3, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x4) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000140)={0x41, {{0xa, 0x4e22, 0x40, @mcast1, 0x4}}, 0x0, 0x7, [{{0xa, 0x4e21, 0x8000, @private0, 0x7fff}}, {{0xa, 0x4e24, 0x2, @remote, 0x800}}, {{0xa, 0x4e21, 0x0, @mcast2, 0x7}}, {{0xa, 0x4e23, 0x6, @local, 0x20}}, {{0xa, 0x4e20, 0xef8, @loopback, 0x1}}, {{0xa, 0x4e20, 0x5, @local, 0x1}}, {{0xa, 0x4e24, 0x8, @mcast1, 0xda}}]}, 0x410) r3 = syz_open_dev$mouse(&(0x7f0000000580), 0x1000, 0x400) ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f00000005c0)) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000600), 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000640)={0xfffffffffffffffb, [], 0x81, "73777614b01e26"}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001640)={{0x0, 0x9, 0x2, 0xff, 0x3, 0x2, 0x3, 0x1ff, 0x3f, 0x1f, 0x5, 0x8, 0x3, 0x81, 0xa1}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000002640)={{0x0, 0x3, 0x3ff, 0x7fff, 0x6, 0x8, 0x80, 0x7, 0x9, 0x4d, 0x5, 0x4, 0x2, 0x9, 0x100000000}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000026c0)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000028c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000002ac0)={0x7fff, [], 0xff, "461807b49ae465"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000003ac0)) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000003cc0)={{0x0, 0x1, 0x7, 0x9, 0x1, 0x7b, 0x3, 0xb6a, 0x400, 0x1, 0x80, 0x4, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000004cc0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000004ec0)={0x4, [], 0x0, "f93bd29bd859bf"}) 15:29:57 executing program 4: r0 = socket(0x28, 0x800, 0x68770a22) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000080)={0x3f, {{0xa, 0x4e20, 0x1c9e, @remote, 0x7}}}, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000140)={'raw\x00', 0x2, [{}, {}]}, 0x48) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x90001, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000200)={'mangle\x00', 0x3, [{}, {}, {}]}, 0x58) r3 = socket(0x22, 0x5, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000280)=0x4, 0x4) r4 = socket(0x22, 0x2, 0xb0) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f00000002c0)={0x1}, 0x4) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/custom1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000480)={0x1c, 0x0, &(0x7f0000000340)=[@clear_death={0x400c630f, 0x2}, @exit_looper, @increfs={0x40046304, 0x3}], 0xc8, 0x0, &(0x7f0000000380)="945a2582e97415526fcffb6e6ffc35829949b698c3ab57af9a20f64c973221b872f70463e96f9459c9dc1a30c8fe2fcedd4c36b65debe6c3eaccc3b81ff761ff0b1fd2ebecc5ff0af654bcfcc2cf0e00025660a75887f400e42c45b0439f8d01542f5794e90ae9dde422c38e6b61b79ffe7c8a7b1be9a30f902d3fa6bb4907a4668dce3fd1165d0b5dc275f5f01f470c7c6a746b18dddc84bf4b89b00ddb68d4e9fe77f60f17a7f1422d8feb01ca02b59447c5bce41060d28dae608fad37fbd9942b955be74daca8"}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000005c0)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/156, 0x9c, 0x1, &(0x7f0000000580)=""/35, 0x23}, &(0x7f0000000600)=0x40) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000640)={0x80000001, {{0xa, 0x4e21, 0x10000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x200}}}, 0x88) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index=0x4, 0x0, 0x0, 0x6, 0x0, 0x0, {0x0, 0x0, r4}}, 0x80) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r6, 0x29, 0xcd, &(0x7f0000000740)={{0xa, 0x4e24, 0x2, @local, 0x3}, {0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x6, [0x6, 0x6, 0x8, 0x2, 0x23a9, 0x81, 0x27d1, 0xfffffffe]}, 0x5c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000840)={'ip6gre0\x00', &(0x7f00000007c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x6, 0x1, 0x3f, @mcast1, @empty, 0x7800, 0x80, 0x1, 0xd19a}}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000880)={@local, 0x1c, r7}) 15:29:57 executing program 3: setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)="c65ef990d11decc0721c9d23adce23f2c5eaa9cb65ae5ae3c1b9bb150ef68b31fbd3b3e950361d1ff2c329b263451b4d8891d97bc330167d8cd12eb0883839947c1d9a3d71c912fff313a3f3e481b8ffac12036438e4c9cd290e3168453e8459ba7aeee2f99d868ea3baec243651802dfca38e9231379458c48a4d6e49e5f761ac3918733aa2b9af86bc637bd4fb2453177da61394a0f4e28a85d46f9fd8ca53340f948cae06c2520ca7b9e13628b6e0d05b08205dd3d87b4a19ecd4a1bb0e0ca067aa9281b8c6", 0xc7) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000100)=""/132, &(0x7f00000001c0)=0x84) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000200)=""/42, &(0x7f0000000240)=0x2a) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000280)='reno\x00', 0x5) mq_getsetattr(0xffffffffffffffff, &(0x7f00000002c0)={0x8, 0xfffffffffffff68f, 0x7, 0xcc0f}, &(0x7f0000000300)) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000340)={0xdb5, 0x101, 0x401, 0x4}) r0 = syz_open_dev$loop(&(0x7f0000000380), 0x7, 0x80) io_cancel(0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x4, r0, &(0x7f00000003c0)="681b7397c305ba7ff3a311755ce6ca5d719de0f425eeca6c9c6839d11d9127a9f10e733776f6d1153a2db8d503c2bfbb9948c48e2ad0b3be8fd30b4846e3201a5e23e976d5075f7ef1f726e9dd01dd8d308c1b3f78d1ff1f1cbed5d5cbd4501224b19ae30464bb5191a1a160fc19636907c2ac4a076dc6a8f674b3645888c413d514bc24ab007cab90c7790674dcb4a309571df6917ba8453bd9ce9575e2b27b0cea4b9b552075042fb79ba19d7a415ea89b10", 0xb3, 0xfff, 0x0, 0x1}, &(0x7f00000004c0)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000540)) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000580)={{0x0, 0x100000001, 0xffffffff00000000, 0x5, 0x2, 0x3, 0x8, 0x6, 0x1f, 0x0, 0x2, 0x3ff, 0x3, 0x0, 0x1}}) openat$vcsa(0xffffffffffffff9c, &(0x7f00000018c0), 0x105200, 0x0) 15:29:57 executing program 1: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"d4c0cadc7862c32b72c9fd760c05ca23", 0x0, 0x0, {0x0, 0x8}, {0x3ff}, 0x1000, [0x6, 0x9, 0x100000000, 0x35e3, 0x200, 0x2, 0xffffffffffff7fff, 0x10000, 0x8, 0x4, 0xff, 0x7049b48f, 0xfff, 0xffffffffffffff01, 0x7, 0x10000]}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3}, 0x1) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"87ccb543c14d08e63a7b0ba432b0a614", r0, r0, {0x7, 0xffffffff}, {0x5, 0x333e}, 0x8, [0x0, 0x4, 0x10001, 0x6, 0x800, 0x3, 0x7, 0x5d, 0x16b7, 0x9, 0x8d76, 0xfffffffffffffff9, 0x0, 0x4, 0x80, 0x5]}) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14, 0x80000) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@ipv4={'\x00', '\xff\xff', @empty}, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5, 0x0, 0x401, 0x100, 0x2, 0x40000040, r2}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@rand_addr=' \x01\x00', @mcast1, @loopback, 0x8, 0x3, 0x5, 0x0, 0x3, 0x0, r2}) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000003c0), 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_DEL_MFC(r4, 0x29, 0xcd, &(0x7f0000000440)={{0xa, 0x4e20, 0x1ff, @local, 0xb07f}, {0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffffffff}, 0x7f, [0x8, 0xfffff801, 0x5, 0xef, 0x7fffffff, 0x581, 0x2, 0xc6b5]}, 0x5c) r5 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_tcp_int(r5, 0x6, 0x4, &(0x7f00000004c0)=0x1, 0x4) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000500)={@local, @remote, @ipv4={'\x00', '\xff\xff', @remote}, 0x5, 0x6, 0xc4, 0x400, 0xffff, 0xa4, r2}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000580)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000000b00)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000600)={0x4b4, 0x13, 0x100, 0x70bd28, 0x25dfdbfe, {0x12, 0x1, 0x2, 0x20, {0x4e23, 0x4e21, [0x1ff, 0x6, 0x83, 0x9], [0x4, 0x400, 0x0, 0x1000], r2, [0x0, 0x7d70dae6]}, 0x20000000, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x98, 0x1, "059b6a667558d3c66dcf091a25471766a25b0cac36aca9a4484e9cf401819e296006c7f789ff62840ca516b9d2b290b8f16d8bec76ec6ac61f77e08ec20bb666a50c0cff81d4c90cd0f45dd00df1748717a64fc96306753dda1a1690d6627aa8bdb85291d11f65631909ed0d9ed5cfb8427d1be0fa9894541309819413fcd530ee4df011dc66387e4914493cf585024d169d8e6f"}, @INET_DIAG_REQ_BYTECODE={0x13, 0x1, "dc71715d25ba6ee08beeddda723dfc"}, @INET_DIAG_REQ_BYTECODE={0xcd, 0x1, "49add60b18e0036c0a16eaf44a81abdb4e83421fb342bdf32d55ea02922c16d837b1f662fadad3afb9280c940af20c1ed5998cb3bfc2b8a1d31b6c79a464e6a88709186dbe1a4895d6222dec8a020816fa710235be1f8b1864b2c79e751b428d9d436f0e38b698deb468eb3ffdb7f43c819480879640233f63742e7104cd75e0784cec9db1be334ce53faa052c5e196964b6279bf0d27f70e2869c6bba9755305d5f6f1658460001f8f40e006f69f198bace92546de1d325b71ad679e02838afc66b6cae2237a10126"}, @INET_DIAG_REQ_BYTECODE={0xb8, 0x1, "24a43a7172daa0a345e28865db7af0d7898b92bbadd1c7d6b8eaa6f8a05795a8ecf9f7d29640c57e09379e74e26e83a82c285fca9fdaf29b4f4aae5457914a8782439e65c710b1105e81944504464bbee0abc77d38d56c5c830c1e3e14fa725f50551e0f2aa47c82a2ae0a548b040f0b993cd0c03932296826466e0e20a25e825fa34febdfb68c70a0bdd4857248b449d14c7dfa5081257e27fb0ed8841595203227e8b9a9edf6dfa6e71cd4ecc481a48b44fed9"}, @INET_DIAG_REQ_BYTECODE={0xf3, 0x1, "9f72c4ce3bf66789cc8bf81aafe5763da16a6419845ecdd391d034940dc78785af0c6264c1e6e935f8c9d58cb11ac66ec7fd2825b780583b16da3e8a1a8b786e05b7ca7b62c66210cd326337219a250dccc4580ae7326c1612c65ee9c70b69655969f39e86a63e2f979fba2ea591e389df04c8ae490a2f039f469bf9473abbe351b505b9d1fe51e9e0b25b71fa58ff69549b62f6671940c4c1ba46c2a84564728b16d9174220eecef8b88e153ca5dacd20687a0a8075ad66f2ac7ea01790fbccbee7c6fc6134c5071d5baf170d9ca622eaa3f34e4a27cc0d7a5b04bfb9f97ab6a7c9cff4f49097548f9cad923f18ac"}, @INET_DIAG_REQ_BYTECODE={0x2f, 0x1, "6e57e41e4bb384c0a698cef4b0dfdfd1a07924d0b199ab872feb015c181629b5e47e71a13949136345bb98"}, @INET_DIAG_REQ_BYTECODE={0x9e, 0x1, "593ed5c78e541f262c3a4c4e817da74e842da407028b248fce2e5a07fbdf1af402edbc9d717eae59eeed9c77bc98f0423eaefc6be3226b6e7f65b8d1f0b7245196233daeb7306837eeef01c5248af4b6049d9eaef7002fa789d797df73319fe2c4fd95f3b47dcd6df2d6b9ca962df181c4bc568fd49312fb7fac088dd004ab8cbe7a363394e666ee28edd76791c9efccac8089a58956ebf59081"}, @INET_DIAG_REQ_BYTECODE={0x70, 0x1, "6ea43988ed441e20c79941a15549a58d5d24d1bd36a1b35de7547742353ed6cc6b6a73426bb5cf187a0ffbac0f1ab2d43b5fd1c77219efc224cabafa0bdd107cc376f449f02f066354a3237fb4eeea6adc4ae50ae4c214ae755a0f7cbb75ab1587cd5c81efd6830302901edc"}]}, 0x4b4}, 0x1, 0x0, 0x0, 0x20000000}, 0x8800) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f0000000b40)={0x1}, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000c80)={0x3b, 0xd, '\x00', [@enc_lim={0x4, 0x1, 0x7f}, @ra={0x5, 0x2, 0x7f}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x2, 0xc, 0x7f, 0x4, [0x2, 0x3, 0xffffffffffff896e, 0x3, 0xf17, 0x400]}}, @ra={0x5, 0x2, 0x1}, @jumbo={0xc2, 0x4, 0x4}, @enc_lim, @jumbo={0xc2, 0x4, 0x2d}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, 0x78) 15:29:57 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0xf8, 0x0, &(0x7f0000000380)=[@enter_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0x7, 0x1, 0x7}, @fd, @flat=@handle={0x73682a85, 0xb}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}}, @register_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/66, 0x42, 0x1, 0x32}, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x34}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x40}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x60, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/170, 0xaa, 0x1, 0x22}, @flat=@weak_binder={0x77622a85, 0xa, 0x2}, @fda={0x66646185, 0xa, 0x4, 0x2a}}, &(0x7f0000000340)={0x0, 0x28, 0x40}}}, @dead_binder_done], 0xfb, 0x0, &(0x7f0000000480)="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"}) io_submit(0x0, 0x0, &(0x7f00000005c0)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x10000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000840)={0x20, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x98, "e333e58853c5fa"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001840)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001a40)={{0x0, 0xa3, 0x190b, 0x4, 0xdc3, 0x7, 0x9, 0x9f, 0xfffffffb, 0x200, 0x3f, 0x1, 0xffff, 0x400, 0x10000000}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001ac0)={{0x0, 0x9, 0x8, 0xffffffff, 0x3, 0x1, 0x1, 0x9, 0xf946, 0x7, 0x4, 0xd48, 0x3, 0x7fffffff, 0xfffffffffffff001}, 0x8, [0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001b40)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001d40)={{0x0, 0x40, 0x7fff, 0x2, 0x101, 0x4, 0x7fff, 0x1, 0xfffffe00, 0x35, 0x3ff, 0x1ff, 0x3, 0xca, 0x1}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002d40)={0x1000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x3f, "4dd071380578dc"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000003d40)={{0x0, 0x6, 0x0, 0x7, 0x5, 0xfffffffffffffffc, 0x7, 0x4, 0xff, 0x20, 0x1ff, 0x4000, 0x2ae, 0x5, 0xff}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000004d40)={0x7fffffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x3f, "ce40b9754ac8e1"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000005d40)={0x1ff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x3, "957c6398ec9700"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000006d40)={{0x0, 0xfffffffffffffffd, 0xff, 0x0, 0xd2e8, 0x8b3f, 0x4, 0xf936, 0x2, 0x5, 0x6, 0xd69, 0x2, 0x7, 0x200}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000007d40)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000007f40)={{0x0, 0x4, 0x5, 0x7, 0xffffffff, 0x3, 0x10000, 0x75, 0x0, 0x80000001, 0x80000000, 0x6, 0x526d45fb, 0x9, 0xfff}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000008f40)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000009140)={0x6e4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xd0, "38561831562967"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000068cc0)={0x6, [{r1}, {}, {0x0, r2}, {0x0, r3}, {}, {r4}, {r5, r6}, {r7}, {0x0, r8}, {r9}, {r10}, {}, {0x0, r11}, {r12}, {r13}, {r14}, {}, {0x0, r15}, {r16}], 0x1, "6d3cdc6e8fb7e6"}) 15:30:10 executing program 7: setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)={0x5e, 0x2, 0x1, 0x3, 0x0, [@dev={0xfe, 0x80, '\x00', 0x10}]}, 0x18) r0 = syz_io_uring_complete(0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14, 0x80800) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000000c0)={@local, r1}, 0x14) getsockname$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000140)=0x1c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4) r4 = socket(0x21, 0x4, 0x401) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f00000002c0)={0x1, {{0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}}}, 0x88) setsockopt$inet6_buf(r4, 0x29, 0xdb, &(0x7f0000000380)="e0b164be7942560e0ef6298eb798f9af0f7faad8459c120e15db44d6355d096b94333aad7459675c54de1aaaf09bf6ab0a8955d07cf9ad8d84a32817ac2d75aec9959d9a7714c633a1ace7fe3079c4e413dd7d8e4adeaa2a96e5b0ef522f", 0x5e) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000500)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000540)={@private2={0xfc, 0x2, '\x00', 0x1}, r5}, 0x14) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8}, 0x20002800) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000006c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x29, 0x2d, &(0x7f0000000800)={0x0, {{0xa, 0x4e22, 0x80, @remote, 0x54a58250}}}, 0x88) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000ac0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a80)={&(0x7f0000000900)={0x148, 0x13, 0x1, 0x70bd26, 0x25dfdbff, {0x5, 0x60, 0xf4, 0xd6, {0x4e22, 0x4e21, [0x6, 0x5, 0x5, 0x4], [0x401, 0x800, 0xd0b, 0x4780ac06], 0x0, [0x6, 0x1f]}, 0x4, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x81, 0x1, "ac3c6c9807a01910bef05b51585092ca051702e63fb24c836e08b86e5f63cd32a73299862b0608b52b8c03f5a348656dca60350e75e6a81533358395de6ee1333ab8a1426e058d09d4d21f71eeeffbe3b47b6cc998f529647ab76faaaec3de4b0a89b7f96a84cfbf3fa0ba2d7b18dc1e939d5ee83bc79181144c3d13b5"}, @INET_DIAG_REQ_BYTECODE={0x75, 0x1, "31d5fbd06ea3a7f821defa49fa6a4d8b7e9f2d097b5ed55043216ed4ea4b1558da8ec748a8f9d6ded8dc061e9419ba8f18e5642877cfca5520b72b17f0c7ead97af28baa7b96e6181016dd3eefe52ade56d88d64462803e51639a134ec3fca447bb3a986c58fed7b57dc24a4e7286a0c8f"}]}, 0x148}, 0x1, 0x0, 0x0, 0x40000}, 0x41) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000b00)=[@mss={0x2, 0x4}, @timestamp, @window={0x3, 0x401}, @window={0x3, 0x1, 0xc35f}], 0x4) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x38, r3, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x38}}, 0x0) 15:30:10 executing program 6: getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl0\x00', r1, 0x4, 0xbe, 0x3, 0x8, 0x2, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x1, 0x38bc, 0x3}}) r3 = accept$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) accept$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f00000002c0)={@mcast2, 0x60, r4}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x382c6ac8}}, './file0\x00'}) getsockopt$inet_tcp_buf(r5, 0x6, 0x1c, &(0x7f0000000340)=""/175, &(0x7f0000000400)=0xaf) accept$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) accept$packet(r0, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000500)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000580)={'ip6tnl0\x00', r2, 0x2f, 0xff, 0x6, 0x400, 0x12, @private1, @empty, 0x8000, 0x20, 0xfffffffc, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'ip6_vti0\x00', r6, 0x4, 0x40, 0x80, 0x1f, 0x53, @remote, @mcast2, 0x40, 0x7, 0x6}}) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000700)={0x3, 0x6}, 0x4) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r7, 0x894b, &(0x7f0000000780)) r8 = memfd_secret(0x80000) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f00000007c0)={0x3, 0x1}, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000800)={0x5, {{0xa, 0x4e23, 0x9, @mcast2, 0x7fffffff}}}, 0x88) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) 15:30:10 executing program 4: r0 = socket(0x28, 0x800, 0x68770a22) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000080)={0x3f, {{0xa, 0x4e20, 0x1c9e, @remote, 0x7}}}, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000140)={'raw\x00', 0x2, [{}, {}]}, 0x48) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x90001, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000200)={'mangle\x00', 0x3, [{}, {}, {}]}, 0x58) r3 = socket(0x22, 0x5, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000280)=0x4, 0x4) r4 = socket(0x22, 0x2, 0xb0) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f00000002c0)={0x1}, 0x4) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/custom1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000480)={0x1c, 0x0, &(0x7f0000000340)=[@clear_death={0x400c630f, 0x2}, @exit_looper, @increfs={0x40046304, 0x3}], 0xc8, 0x0, &(0x7f0000000380)="945a2582e97415526fcffb6e6ffc35829949b698c3ab57af9a20f64c973221b872f70463e96f9459c9dc1a30c8fe2fcedd4c36b65debe6c3eaccc3b81ff761ff0b1fd2ebecc5ff0af654bcfcc2cf0e00025660a75887f400e42c45b0439f8d01542f5794e90ae9dde422c38e6b61b79ffe7c8a7b1be9a30f902d3fa6bb4907a4668dce3fd1165d0b5dc275f5f01f470c7c6a746b18dddc84bf4b89b00ddb68d4e9fe77f60f17a7f1422d8feb01ca02b59447c5bce41060d28dae608fad37fbd9942b955be74daca8"}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000005c0)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/156, 0x9c, 0x1, &(0x7f0000000580)=""/35, 0x23}, &(0x7f0000000600)=0x40) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000640)={0x80000001, {{0xa, 0x4e21, 0x10000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x200}}}, 0x88) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index=0x4, 0x0, 0x0, 0x6, 0x0, 0x0, {0x0, 0x0, r4}}, 0x80) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r6, 0x29, 0xcd, &(0x7f0000000740)={{0xa, 0x4e24, 0x2, @local, 0x3}, {0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x6, [0x6, 0x6, 0x8, 0x2, 0x23a9, 0x81, 0x27d1, 0xfffffffe]}, 0x5c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000840)={'ip6gre0\x00', &(0x7f00000007c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x6, 0x1, 0x3f, @mcast1, @empty, 0x7800, 0x80, 0x1, 0xd19a}}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000880)={@local, 0x1c, r7}) 15:30:10 executing program 3: setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)="c65ef990d11decc0721c9d23adce23f2c5eaa9cb65ae5ae3c1b9bb150ef68b31fbd3b3e950361d1ff2c329b263451b4d8891d97bc330167d8cd12eb0883839947c1d9a3d71c912fff313a3f3e481b8ffac12036438e4c9cd290e3168453e8459ba7aeee2f99d868ea3baec243651802dfca38e9231379458c48a4d6e49e5f761ac3918733aa2b9af86bc637bd4fb2453177da61394a0f4e28a85d46f9fd8ca53340f948cae06c2520ca7b9e13628b6e0d05b08205dd3d87b4a19ecd4a1bb0e0ca067aa9281b8c6", 0xc7) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000100)=""/132, &(0x7f00000001c0)=0x84) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000200)=""/42, &(0x7f0000000240)=0x2a) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000280)='reno\x00', 0x5) mq_getsetattr(0xffffffffffffffff, &(0x7f00000002c0)={0x8, 0xfffffffffffff68f, 0x7, 0xcc0f}, &(0x7f0000000300)) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000340)={0xdb5, 0x101, 0x401, 0x4}) r0 = syz_open_dev$loop(&(0x7f0000000380), 0x7, 0x80) io_cancel(0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x4, r0, &(0x7f00000003c0)="681b7397c305ba7ff3a311755ce6ca5d719de0f425eeca6c9c6839d11d9127a9f10e733776f6d1153a2db8d503c2bfbb9948c48e2ad0b3be8fd30b4846e3201a5e23e976d5075f7ef1f726e9dd01dd8d308c1b3f78d1ff1f1cbed5d5cbd4501224b19ae30464bb5191a1a160fc19636907c2ac4a076dc6a8f674b3645888c413d514bc24ab007cab90c7790674dcb4a309571df6917ba8453bd9ce9575e2b27b0cea4b9b552075042fb79ba19d7a415ea89b10", 0xb3, 0xfff, 0x0, 0x1}, &(0x7f00000004c0)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000540)) openat$vcsa(0xffffffffffffff9c, &(0x7f00000018c0), 0x105200, 0x0) 15:30:10 executing program 5: ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000000)={0x0, 0x1ff, 0x8798}) mq_timedsend(0xffffffffffffffff, &(0x7f0000000040)="48f82bdea935cfba16267b6f7306e05a79674cd19b67f551", 0x18, 0x6, &(0x7f0000000080)={0x0, 0x989680}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) syz_io_uring_setup(0x20f, &(0x7f0000000100)={0x0, 0xc87d, 0x20, 0x2, 0x52, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) write$selinux_attr(r0, &(0x7f0000000200)='system_u:object_r:system_dbusd_var_lib_t:s0\x00', 0x2c) r1 = accept4$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000003c0), 0x1e5dc0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000480)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x80, r1, &(0x7f00000002c0)="8a409233828523bdcd6d501faa5e1460f31273cb0e90f906deeaa187a3e4d01b9eb516edcf920909c5f9366342524eccc49ff4ff3cf3dceb24521763b412c9fa06889edda15de61e84b61e520f8fbe63ea33743cb3fa7c13448db3cab1c1f282d058de3c599c4dee20a44fac6d2a98440c797b0776b4a9eb851fd7d6e6436e6a1db16e60f8ec9ddc062899df0f4d6e3d66de46670f14ad1ac6104fa708252a7462c043e34ecf5bcbc574dfee79561dc46553cc34", 0xb4, 0x0, 0x0, 0x0, r0}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2, 0x7, r2, &(0x7f0000000400)="ad71d632f4", 0x5, 0x9, 0x0, 0x2, r0}]) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000004c0)={0x0, 0x0, 0xffffffffffffffff, 0x4}) r3 = io_uring_setup(0x4c8e, &(0x7f0000000500)={0x0, 0x9d84, 0x1c, 0x2, 0x2fa, 0x0, r0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000580)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e20, 0x40, @empty, 0xd79b}}, 0x0, 0x0, 0x16, 0x0, "85d1191a58a2f27de4b44902caab4f42f235350c98f6489f2104d03d0cc56fb000dcef26f89f8ea46e2603754aeedb6f43b20d5c02bdf413d1f79ebdff0cb32090501722e56a785934df82838a5adefb"}, 0xd8) io_setup(0x7, &(0x7f0000000880)=0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000a80)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) io_submit(r7, 0x4, &(0x7f0000000cc0)=[&(0x7f0000000940)={0x0, 0x0, 0x0, 0x5, 0x20, r2, &(0x7f00000008c0)="0da7c1c104a5bdd590baa52dbb623f18626a0ce931f33251569345f0511a79fe9b84fe019489a72822f092ebc936812f4bca334d984b0afa9ab7443a32564ab3427a56d4be44a70e103ff44f", 0x4c, 0x7, 0x0, 0x1, r2}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x6, 0x5, r1, &(0x7f0000000980)="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", 0xfb, 0x4, 0x0, 0x0, r8}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, &(0x7f0000000b00), 0x0, 0x100000001, 0x0, 0x1, r2}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x7, 0x3, r3, &(0x7f0000000b80)="0fb2829617d6993a6e18a9a36c5f43050533b08bc7362076e39b70219615a58b12d72664b5d794fbd2a176080c971cbbb0ce3a88e6b464201baaf13a6e51580988cfcdc7e39e4da737461f51cbac8d01cb8878d9452ca6b4ef0b6f3f105030e735dc59320c4991e0ae5af33c0dcd7092cd9f37ce3cc31bcb68f890b691423dbed08603901f801187de00cf68cbad3ff6ae9b0d574fd449081867438ba72b42721b2bcea6a318c7651b57095358324f5eb068e6efea560341535a3fea74ca1e7825ab68c3a290e3e8a85bca958f065713cc53cb7db904e3a7933a06b7c00fe7b1d632c2c313b496", 0xe7, 0x1, 0x0, 0x1, r0}]) 15:30:10 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x800, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000080), 0xd1dc, 0x28000) setsockopt$inet6_tcp_int(r1, 0x6, 0x3, &(0x7f00000000c0)=0x3, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100), 0x4) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000140)={0x41, {{0xa, 0x4e22, 0x40, @mcast1, 0x4}}, 0x0, 0x7, [{{0xa, 0x4e21, 0x8000, @private0, 0x7fff}}, {{0xa, 0x4e24, 0x2, @remote, 0x800}}, {{0xa, 0x4e21, 0x0, @mcast2, 0x7}}, {{0xa, 0x4e23, 0x6, @local, 0x20}}, {{0xa, 0x4e20, 0xef8, @loopback, 0x1}}, {{0xa, 0x4e20, 0x5, @local, 0x1}}, {{0xa, 0x4e24, 0x8, @mcast1, 0xda}}]}, 0x410) r2 = syz_open_dev$mouse(&(0x7f0000000580), 0x1000, 0x400) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f00000005c0)) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000600), 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000640)={0xfffffffffffffffb, [], 0x81, "73777614b01e26"}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000001640)={{0x0, 0x9, 0x2, 0xff, 0x3, 0x2, 0x3, 0x1ff, 0x3f, 0x1f, 0x5, 0x8, 0x3, 0x81, 0xa1}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000002640)={{0x0, 0x3, 0x3ff, 0x7fff, 0x6, 0x8, 0x80, 0x7, 0x9, 0x4d, 0x5, 0x4, 0x2, 0x9, 0x100000000}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000026c0)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000028c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000002ac0)={0x7fff, [], 0xff, "461807b49ae465"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000003ac0)) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000003cc0)={{0x0, 0x1, 0x7, 0x9, 0x1, 0x7b, 0x3, 0xb6a, 0x400, 0x1, 0x80, 0x4, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000004cc0)) 15:30:10 executing program 1: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"d4c0cadc7862c32b72c9fd760c05ca23", 0x0, 0x0, {0x0, 0x8}, {0x3ff}, 0x1000, [0x6, 0x9, 0x100000000, 0x35e3, 0x200, 0x2, 0xffffffffffff7fff, 0x10000, 0x8, 0x4, 0xff, 0x7049b48f, 0xfff, 0xffffffffffffff01, 0x7, 0x10000]}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3}, 0x1) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"87ccb543c14d08e63a7b0ba432b0a614", r0, r0, {0x7, 0xffffffff}, {0x5, 0x333e}, 0x8, [0x0, 0x4, 0x10001, 0x6, 0x800, 0x3, 0x7, 0x5d, 0x16b7, 0x9, 0x8d76, 0xfffffffffffffff9, 0x0, 0x4, 0x80, 0x5]}) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14, 0x80000) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@ipv4={'\x00', '\xff\xff', @empty}, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5, 0x0, 0x401, 0x100, 0x2, 0x40000040, r2}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@rand_addr=' \x01\x00', @mcast1, @loopback, 0x8, 0x3, 0x5, 0x0, 0x3, 0x0, r2}) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000003c0), 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_DEL_MFC(r4, 0x29, 0xcd, &(0x7f0000000440)={{0xa, 0x4e20, 0x1ff, @local, 0xb07f}, {0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffffffff}, 0x7f, [0x8, 0xfffff801, 0x5, 0xef, 0x7fffffff, 0x581, 0x2, 0xc6b5]}, 0x5c) r5 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_tcp_int(r5, 0x6, 0x4, &(0x7f00000004c0)=0x1, 0x4) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000500)={@local, @remote, @ipv4={'\x00', '\xff\xff', @remote}, 0x5, 0x6, 0xc4, 0x400, 0xffff, 0xa4, r2}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000580)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000000b00)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000600)={0x4b4, 0x13, 0x100, 0x70bd28, 0x25dfdbfe, {0x12, 0x1, 0x2, 0x20, {0x4e23, 0x4e21, [0x1ff, 0x6, 0x83, 0x9], [0x4, 0x400, 0x0, 0x1000], r2, [0x0, 0x7d70dae6]}, 0x20000000, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x98, 0x1, "059b6a667558d3c66dcf091a25471766a25b0cac36aca9a4484e9cf401819e296006c7f789ff62840ca516b9d2b290b8f16d8bec76ec6ac61f77e08ec20bb666a50c0cff81d4c90cd0f45dd00df1748717a64fc96306753dda1a1690d6627aa8bdb85291d11f65631909ed0d9ed5cfb8427d1be0fa9894541309819413fcd530ee4df011dc66387e4914493cf585024d169d8e6f"}, @INET_DIAG_REQ_BYTECODE={0x13, 0x1, "dc71715d25ba6ee08beeddda723dfc"}, @INET_DIAG_REQ_BYTECODE={0xcd, 0x1, "49add60b18e0036c0a16eaf44a81abdb4e83421fb342bdf32d55ea02922c16d837b1f662fadad3afb9280c940af20c1ed5998cb3bfc2b8a1d31b6c79a464e6a88709186dbe1a4895d6222dec8a020816fa710235be1f8b1864b2c79e751b428d9d436f0e38b698deb468eb3ffdb7f43c819480879640233f63742e7104cd75e0784cec9db1be334ce53faa052c5e196964b6279bf0d27f70e2869c6bba9755305d5f6f1658460001f8f40e006f69f198bace92546de1d325b71ad679e02838afc66b6cae2237a10126"}, @INET_DIAG_REQ_BYTECODE={0xb8, 0x1, "24a43a7172daa0a345e28865db7af0d7898b92bbadd1c7d6b8eaa6f8a05795a8ecf9f7d29640c57e09379e74e26e83a82c285fca9fdaf29b4f4aae5457914a8782439e65c710b1105e81944504464bbee0abc77d38d56c5c830c1e3e14fa725f50551e0f2aa47c82a2ae0a548b040f0b993cd0c03932296826466e0e20a25e825fa34febdfb68c70a0bdd4857248b449d14c7dfa5081257e27fb0ed8841595203227e8b9a9edf6dfa6e71cd4ecc481a48b44fed9"}, @INET_DIAG_REQ_BYTECODE={0xf3, 0x1, "9f72c4ce3bf66789cc8bf81aafe5763da16a6419845ecdd391d034940dc78785af0c6264c1e6e935f8c9d58cb11ac66ec7fd2825b780583b16da3e8a1a8b786e05b7ca7b62c66210cd326337219a250dccc4580ae7326c1612c65ee9c70b69655969f39e86a63e2f979fba2ea591e389df04c8ae490a2f039f469bf9473abbe351b505b9d1fe51e9e0b25b71fa58ff69549b62f6671940c4c1ba46c2a84564728b16d9174220eecef8b88e153ca5dacd20687a0a8075ad66f2ac7ea01790fbccbee7c6fc6134c5071d5baf170d9ca622eaa3f34e4a27cc0d7a5b04bfb9f97ab6a7c9cff4f49097548f9cad923f18ac"}, @INET_DIAG_REQ_BYTECODE={0x2f, 0x1, "6e57e41e4bb384c0a698cef4b0dfdfd1a07924d0b199ab872feb015c181629b5e47e71a13949136345bb98"}, @INET_DIAG_REQ_BYTECODE={0x9e, 0x1, "593ed5c78e541f262c3a4c4e817da74e842da407028b248fce2e5a07fbdf1af402edbc9d717eae59eeed9c77bc98f0423eaefc6be3226b6e7f65b8d1f0b7245196233daeb7306837eeef01c5248af4b6049d9eaef7002fa789d797df73319fe2c4fd95f3b47dcd6df2d6b9ca962df181c4bc568fd49312fb7fac088dd004ab8cbe7a363394e666ee28edd76791c9efccac8089a58956ebf59081"}, @INET_DIAG_REQ_BYTECODE={0x70, 0x1, "6ea43988ed441e20c79941a15549a58d5d24d1bd36a1b35de7547742353ed6cc6b6a73426bb5cf187a0ffbac0f1ab2d43b5fd1c77219efc224cabafa0bdd107cc376f449f02f066354a3237fb4eeea6adc4ae50ae4c214ae755a0f7cbb75ab1587cd5c81efd6830302901edc"}]}, 0x4b4}, 0x1, 0x0, 0x0, 0x20000000}, 0x8800) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000c80)={0x3b, 0xd, '\x00', [@enc_lim={0x4, 0x1, 0x7f}, @ra={0x5, 0x2, 0x7f}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x2, 0xc, 0x7f, 0x4, [0x2, 0x3, 0xffffffffffff896e, 0x3, 0xf17, 0x400]}}, @ra={0x5, 0x2, 0x1}, @jumbo={0xc2, 0x4, 0x4}, @enc_lim, @jumbo={0xc2, 0x4, 0x2d}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, 0x78) 15:30:10 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0xf8, 0x0, &(0x7f0000000380)=[@enter_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0x7, 0x1, 0x7}, @fd, @flat=@handle={0x73682a85, 0xb}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}}, @register_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/66, 0x42, 0x1, 0x32}, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x34}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x40}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x60, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/170, 0xaa, 0x1, 0x22}, @flat=@weak_binder={0x77622a85, 0xa, 0x2}, @fda={0x66646185, 0xa, 0x4, 0x2a}}, &(0x7f0000000340)={0x0, 0x28, 0x40}}}, @dead_binder_done], 0xfb, 0x0, &(0x7f0000000480)="867e5e8549e01f61e324db6a49b7fbba0ba9627b7ef97b2e7191ae2b10dffa462b90c2a4946551efb146e957821842d7df820d7f6398ecd1d1a4114d85758708a607826096e0f8f4d4da1b7635885eb570e884683ea03d28588d46544f9aee7ea507ee8d5341ddb8c62b60798ddce6a0821b105b713cf4b1d698cccfb61cbd7a34ec8046f53501af7bae3cfc35375a2564e209ca15dad52cc8939f482282d53d96a266560dde6db82d8d95e356bd823a52bca09a8a4426f0146c98d0561cfee3cbdb31520485170ef6e9fb2ea3a2cc40545e50e90762969190b3983d6775430ae751bba7b057a85b37b3ded67a6784b1e752aca50ecdf14c06a86d"}) io_submit(0x0, 0x0, &(0x7f00000005c0)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x10000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000640)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000840)={0x20, [], 0x98, "e333e58853c5fa"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001840)) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001a40)={{0x0, 0xa3, 0x190b, 0x4, 0xdc3, 0x7, 0x9, 0x9f, 0xfffffffb, 0x200, 0x3f, 0x1, 0xffff, 0x400, 0x10000000}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001ac0)={{0x0, 0x9, 0x8, 0xffffffff, 0x3, 0x1, 0x1, 0x9, 0xf946, 0x7, 0x4, 0xd48, 0x3, 0x7fffffff, 0xfffffffffffff001}, 0x8, [0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001b40)) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001d40)={{0x0, 0x40, 0x7fff, 0x2, 0x101, 0x4, 0x7fff, 0x1, 0xfffffe00, 0x35, 0x3ff, 0x1ff, 0x3, 0xca, 0x1}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002d40)={0x1000, [], 0x3f, "4dd071380578dc"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000003d40)={{0x0, 0x6, 0x0, 0x7, 0x5, 0xfffffffffffffffc, 0x7, 0x4, 0xff, 0x20, 0x1ff, 0x4000, 0x2ae, 0x5, 0xff}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000004d40)={0x7fffffff, [], 0x3f, "ce40b9754ac8e1"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000005d40)={0x1ff, [], 0x3, "957c6398ec9700"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000006d40)={{0x0, 0xfffffffffffffffd, 0xff, 0x0, 0xd2e8, 0x8b3f, 0x4, 0xf936, 0x2, 0x5, 0x6, 0xd69, 0x2, 0x7, 0x200}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000007d40)) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000007f40)={{0x0, 0x4, 0x5, 0x7, 0xffffffff, 0x3, 0x10000, 0x75, 0x0, 0x80000001, 0x80000000, 0x6, 0x526d45fb, 0x9, 0xfff}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000008f40)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000009140)={0x6e4, [], 0xd0, "38561831562967"}) 15:30:10 executing program 6: getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl0\x00', r1, 0x4, 0xbe, 0x3, 0x8, 0x2, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x1, 0x38bc, 0x3}}) r3 = accept$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) accept$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f00000002c0)={@mcast2, 0x60, r4}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x382c6ac8}}, './file0\x00'}) getsockopt$inet_tcp_buf(r5, 0x6, 0x1c, &(0x7f0000000340)=""/175, &(0x7f0000000400)=0xaf) accept$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) accept$packet(r0, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000500)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000580)={'ip6tnl0\x00', r2, 0x2f, 0xff, 0x6, 0x400, 0x12, @private1, @empty, 0x8000, 0x20, 0xfffffffc, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'ip6_vti0\x00', r6, 0x4, 0x40, 0x80, 0x1f, 0x53, @remote, @mcast2, 0x40, 0x7, 0x6}}) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000700)={0x3, 0x6}, 0x4) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r7, 0x894b, &(0x7f0000000780)) r8 = memfd_secret(0x80000) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f00000007c0)={0x3, 0x1}, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000800)={0x5, {{0xa, 0x4e23, 0x9, @mcast2, 0x7fffffff}}}, 0x88) 15:30:10 executing program 3: setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)="c65ef990d11decc0721c9d23adce23f2c5eaa9cb65ae5ae3c1b9bb150ef68b31fbd3b3e950361d1ff2c329b263451b4d8891d97bc330167d8cd12eb0883839947c1d9a3d71c912fff313a3f3e481b8ffac12036438e4c9cd290e3168453e8459ba7aeee2f99d868ea3baec243651802dfca38e9231379458c48a4d6e49e5f761ac3918733aa2b9af86bc637bd4fb2453177da61394a0f4e28a85d46f9fd8ca53340f948cae06c2520ca7b9e13628b6e0d05b08205dd3d87b4a19ecd4a1bb0e0ca067aa9281b8c6", 0xc7) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000100)=""/132, &(0x7f00000001c0)=0x84) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000200)=""/42, &(0x7f0000000240)=0x2a) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000280)='reno\x00', 0x5) mq_getsetattr(0xffffffffffffffff, &(0x7f00000002c0)={0x8, 0xfffffffffffff68f, 0x7, 0xcc0f}, &(0x7f0000000300)) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000340)={0xdb5, 0x101, 0x401, 0x4}) r0 = syz_open_dev$loop(&(0x7f0000000380), 0x7, 0x80) io_cancel(0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x4, r0, &(0x7f00000003c0)="681b7397c305ba7ff3a311755ce6ca5d719de0f425eeca6c9c6839d11d9127a9f10e733776f6d1153a2db8d503c2bfbb9948c48e2ad0b3be8fd30b4846e3201a5e23e976d5075f7ef1f726e9dd01dd8d308c1b3f78d1ff1f1cbed5d5cbd4501224b19ae30464bb5191a1a160fc19636907c2ac4a076dc6a8f674b3645888c413d514bc24ab007cab90c7790674dcb4a309571df6917ba8453bd9ce9575e2b27b0cea4b9b552075042fb79ba19d7a415ea89b10", 0xb3, 0xfff, 0x0, 0x1}, &(0x7f00000004c0)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000018c0), 0x105200, 0x0) 15:30:25 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x800, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000080), 0xd1dc, 0x28000) setsockopt$inet6_tcp_int(r1, 0x6, 0x3, &(0x7f00000000c0)=0x3, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100), 0x4) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000140)={0x41, {{0xa, 0x4e22, 0x40, @mcast1, 0x4}}, 0x0, 0x7, [{{0xa, 0x4e21, 0x8000, @private0, 0x7fff}}, {{0xa, 0x4e24, 0x2, @remote, 0x800}}, {{0xa, 0x4e21, 0x0, @mcast2, 0x7}}, {{0xa, 0x4e23, 0x6, @local, 0x20}}, {{0xa, 0x4e20, 0xef8, @loopback, 0x1}}, {{0xa, 0x4e20, 0x5, @local, 0x1}}, {{0xa, 0x4e24, 0x8, @mcast1, 0xda}}]}, 0x410) r2 = syz_open_dev$mouse(&(0x7f0000000580), 0x1000, 0x400) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f00000005c0)) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000600), 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000640)={0xfffffffffffffffb, [], 0x81, "73777614b01e26"}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000001640)={{0x0, 0x9, 0x2, 0xff, 0x3, 0x2, 0x3, 0x1ff, 0x3f, 0x1f, 0x5, 0x8, 0x3, 0x81, 0xa1}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000002640)={{0x0, 0x3, 0x3ff, 0x7fff, 0x6, 0x8, 0x80, 0x7, 0x9, 0x4d, 0x5, 0x4, 0x2, 0x9, 0x100000000}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000026c0)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000028c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000002ac0)={0x7fff, [], 0xff, "461807b49ae465"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000003ac0)) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000003cc0)={{0x0, 0x1, 0x7, 0x9, 0x1, 0x7b, 0x3, 0xb6a, 0x400, 0x1, 0x80, 0x4, 0x6}}) 15:30:25 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0xf8, 0x0, &(0x7f0000000380)=[@enter_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0x7, 0x1, 0x7}, @fd, @flat=@handle={0x73682a85, 0xb}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}}, @register_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/66, 0x42, 0x1, 0x32}, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x34}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x40}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x60, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/170, 0xaa, 0x1, 0x22}, @flat=@weak_binder={0x77622a85, 0xa, 0x2}, @fda={0x66646185, 0xa, 0x4, 0x2a}}, &(0x7f0000000340)={0x0, 0x28, 0x40}}}, @dead_binder_done], 0xfb, 0x0, &(0x7f0000000480)="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"}) io_submit(0x0, 0x0, &(0x7f00000005c0)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x10000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000640)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000840)={0x20, [], 0x98, "e333e58853c5fa"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001840)) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001a40)={{0x0, 0xa3, 0x190b, 0x4, 0xdc3, 0x7, 0x9, 0x9f, 0xfffffffb, 0x200, 0x3f, 0x1, 0xffff, 0x400, 0x10000000}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001ac0)={{0x0, 0x9, 0x8, 0xffffffff, 0x3, 0x1, 0x1, 0x9, 0xf946, 0x7, 0x4, 0xd48, 0x3, 0x7fffffff, 0xfffffffffffff001}, 0x8, [0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001b40)) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001d40)={{0x0, 0x40, 0x7fff, 0x2, 0x101, 0x4, 0x7fff, 0x1, 0xfffffe00, 0x35, 0x3ff, 0x1ff, 0x3, 0xca, 0x1}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002d40)={0x1000, [], 0x3f, "4dd071380578dc"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000003d40)={{0x0, 0x6, 0x0, 0x7, 0x5, 0xfffffffffffffffc, 0x7, 0x4, 0xff, 0x20, 0x1ff, 0x4000, 0x2ae, 0x5, 0xff}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000004d40)={0x7fffffff, [], 0x3f, "ce40b9754ac8e1"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000005d40)={0x1ff, [], 0x3, "957c6398ec9700"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000006d40)={{0x0, 0xfffffffffffffffd, 0xff, 0x0, 0xd2e8, 0x8b3f, 0x4, 0xf936, 0x2, 0x5, 0x6, 0xd69, 0x2, 0x7, 0x200}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000007d40)) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000007f40)={{0x0, 0x4, 0x5, 0x7, 0xffffffff, 0x3, 0x10000, 0x75, 0x0, 0x80000001, 0x80000000, 0x6, 0x526d45fb, 0x9, 0xfff}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000008f40)) 15:30:25 executing program 7: setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)={0x5e, 0x2, 0x1, 0x3, 0x0, [@dev={0xfe, 0x80, '\x00', 0x10}]}, 0x18) r0 = syz_io_uring_complete(0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14, 0x80800) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000000c0)={@local, r1}, 0x14) getsockname$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000140)=0x1c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4) r4 = socket(0x21, 0x4, 0x401) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f00000002c0)={0x1, {{0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}}}, 0x88) setsockopt$inet6_buf(r4, 0x29, 0xdb, &(0x7f0000000380)="e0b164be7942560e0ef6298eb798f9af0f7faad8459c120e15db44d6355d096b94333aad7459675c54de1aaaf09bf6ab0a8955d07cf9ad8d84a32817ac2d75aec9959d9a7714c633a1ace7fe3079c4e413dd7d8e4adeaa2a96e5b0ef522f", 0x5e) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000500)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000540)={@private2={0xfc, 0x2, '\x00', 0x1}, r5}, 0x14) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8}, 0x20002800) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000006c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x29, 0x2d, &(0x7f0000000800)={0x0, {{0xa, 0x4e22, 0x80, @remote, 0x54a58250}}}, 0x88) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000ac0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a80)={&(0x7f0000000900)={0x148, 0x13, 0x1, 0x70bd26, 0x25dfdbff, {0x5, 0x60, 0xf4, 0xd6, {0x4e22, 0x4e21, [0x6, 0x5, 0x5, 0x4], [0x401, 0x800, 0xd0b, 0x4780ac06], 0x0, [0x6, 0x1f]}, 0x4, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x81, 0x1, "ac3c6c9807a01910bef05b51585092ca051702e63fb24c836e08b86e5f63cd32a73299862b0608b52b8c03f5a348656dca60350e75e6a81533358395de6ee1333ab8a1426e058d09d4d21f71eeeffbe3b47b6cc998f529647ab76faaaec3de4b0a89b7f96a84cfbf3fa0ba2d7b18dc1e939d5ee83bc79181144c3d13b5"}, @INET_DIAG_REQ_BYTECODE={0x75, 0x1, "31d5fbd06ea3a7f821defa49fa6a4d8b7e9f2d097b5ed55043216ed4ea4b1558da8ec748a8f9d6ded8dc061e9419ba8f18e5642877cfca5520b72b17f0c7ead97af28baa7b96e6181016dd3eefe52ade56d88d64462803e51639a134ec3fca447bb3a986c58fed7b57dc24a4e7286a0c8f"}]}, 0x148}, 0x1, 0x0, 0x0, 0x40000}, 0x41) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000b00)=[@mss={0x2, 0x4}, @timestamp, @window={0x3, 0x401}, @window={0x3, 0x1, 0xc35f}], 0x4) 15:30:25 executing program 4: r0 = socket(0x28, 0x800, 0x68770a22) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000080)={0x3f, {{0xa, 0x4e20, 0x1c9e, @remote, 0x7}}}, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000140)={'raw\x00', 0x2, [{}, {}]}, 0x48) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x90001, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000200)={'mangle\x00', 0x3, [{}, {}, {}]}, 0x58) r3 = socket(0x22, 0x5, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000280)=0x4, 0x4) r4 = socket(0x22, 0x2, 0xb0) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f00000002c0)={0x1}, 0x4) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/custom1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000480)={0x1c, 0x0, &(0x7f0000000340)=[@clear_death={0x400c630f, 0x2}, @exit_looper, @increfs={0x40046304, 0x3}], 0xc8, 0x0, &(0x7f0000000380)="945a2582e97415526fcffb6e6ffc35829949b698c3ab57af9a20f64c973221b872f70463e96f9459c9dc1a30c8fe2fcedd4c36b65debe6c3eaccc3b81ff761ff0b1fd2ebecc5ff0af654bcfcc2cf0e00025660a75887f400e42c45b0439f8d01542f5794e90ae9dde422c38e6b61b79ffe7c8a7b1be9a30f902d3fa6bb4907a4668dce3fd1165d0b5dc275f5f01f470c7c6a746b18dddc84bf4b89b00ddb68d4e9fe77f60f17a7f1422d8feb01ca02b59447c5bce41060d28dae608fad37fbd9942b955be74daca8"}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000005c0)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/156, 0x9c, 0x1, &(0x7f0000000580)=""/35, 0x23}, &(0x7f0000000600)=0x40) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000640)={0x80000001, {{0xa, 0x4e21, 0x10000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x200}}}, 0x88) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index=0x4, 0x0, 0x0, 0x6, 0x0, 0x0, {0x0, 0x0, r4}}, 0x80) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r6, 0x29, 0xcd, &(0x7f0000000740)={{0xa, 0x4e24, 0x2, @local, 0x3}, {0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x6, [0x6, 0x6, 0x8, 0x2, 0x23a9, 0x81, 0x27d1, 0xfffffffe]}, 0x5c) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000880)={@local, 0x1c}) 15:30:25 executing program 5: ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000000)={0x0, 0x1ff, 0x8798}) mq_timedsend(0xffffffffffffffff, &(0x7f0000000040)="48f82bdea935cfba16267b6f7306e05a79674cd19b67f551", 0x18, 0x6, &(0x7f0000000080)={0x0, 0x989680}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) syz_io_uring_setup(0x20f, &(0x7f0000000100)={0x0, 0xc87d, 0x20, 0x2, 0x52, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) write$selinux_attr(r0, &(0x7f0000000200)='system_u:object_r:system_dbusd_var_lib_t:s0\x00', 0x2c) r1 = accept4$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000003c0), 0x1e5dc0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000480)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x80, r1, &(0x7f00000002c0)="8a409233828523bdcd6d501faa5e1460f31273cb0e90f906deeaa187a3e4d01b9eb516edcf920909c5f9366342524eccc49ff4ff3cf3dceb24521763b412c9fa06889edda15de61e84b61e520f8fbe63ea33743cb3fa7c13448db3cab1c1f282d058de3c599c4dee20a44fac6d2a98440c797b0776b4a9eb851fd7d6e6436e6a1db16e60f8ec9ddc062899df0f4d6e3d66de46670f14ad1ac6104fa708252a7462c043e34ecf5bcbc574dfee79561dc46553cc34", 0xb4, 0x0, 0x0, 0x0, r0}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2, 0x7, r2, &(0x7f0000000400)="ad71d632f4", 0x5, 0x9, 0x0, 0x2, r0}]) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000004c0)={0x0, 0x0, 0xffffffffffffffff, 0x4}) r3 = io_uring_setup(0x4c8e, &(0x7f0000000500)={0x0, 0x9d84, 0x1c, 0x2, 0x2fa, 0x0, r0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000580)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e20, 0x40, @empty, 0xd79b}}, 0x0, 0x0, 0x16, 0x0, "85d1191a58a2f27de4b44902caab4f42f235350c98f6489f2104d03d0cc56fb000dcef26f89f8ea46e2603754aeedb6f43b20d5c02bdf413d1f79ebdff0cb32090501722e56a785934df82838a5adefb"}, 0xd8) io_setup(0x7, &(0x7f0000000880)=0x0) io_submit(r7, 0x4, &(0x7f0000000cc0)=[&(0x7f0000000940)={0x0, 0x0, 0x0, 0x5, 0x20, r2, &(0x7f00000008c0)="0da7c1c104a5bdd590baa52dbb623f18626a0ce931f33251569345f0511a79fe9b84fe019489a72822f092ebc936812f4bca334d984b0afa9ab7443a32564ab3427a56d4be44a70e103ff44f", 0x4c, 0x7, 0x0, 0x1, r2}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x6, 0x5, r1, &(0x7f0000000980)="c842d606e4708da486090cc1f98a59bfee289f742c5ad27a9246a3a69d71e4848b7f8af18b97063dfe0dbdbc884213c18ec45e97688bc19a46dd25e99889a05915fc9e3c22d7a6994e7d44c89271d52bd753fba7d76b30c640148ec54523d25245ea6312b6cbd77d3356cb94597deb61090d95ca380560e49a883662f0762b1c70241b2229cc62e23f19313f3bad8760f5554c93bbfbcf44e04e9b83268e01b48aa796532f44fac2a81c5a1110697bb58e9775a51371760822cee53c70dca3411a41d57e5f79ec86933fd09b9f1778611bf1b028c4428c79c23cf6245aa2ad686e2793448e24265ba1f8b18421533a8cb243d7972ccd111a709e43", 0xfb, 0x4}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, &(0x7f0000000b00), 0x0, 0x100000001, 0x0, 0x1, r2}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x7, 0x3, r3, &(0x7f0000000b80)="0fb2829617d6993a6e18a9a36c5f43050533b08bc7362076e39b70219615a58b12d72664b5d794fbd2a176080c971cbbb0ce3a88e6b464201baaf13a6e51580988cfcdc7e39e4da737461f51cbac8d01cb8878d9452ca6b4ef0b6f3f105030e735dc59320c4991e0ae5af33c0dcd7092cd9f37ce3cc31bcb68f890b691423dbed08603901f801187de00cf68cbad3ff6ae9b0d574fd449081867438ba72b42721b2bcea6a318c7651b57095358324f5eb068e6efea560341535a3fea74ca1e7825ab68c3a290e3e8a85bca958f065713cc53cb7db904e3a7933a06b7c00fe7b1d632c2c313b496", 0xe7, 0x1, 0x0, 0x1, r0}]) 15:30:25 executing program 6: getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl0\x00', r1, 0x4, 0xbe, 0x3, 0x8, 0x2, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x1, 0x38bc, 0x3}}) r3 = accept$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) accept$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f00000002c0)={@mcast2, 0x60, r4}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x382c6ac8}}, './file0\x00'}) getsockopt$inet_tcp_buf(r5, 0x6, 0x1c, &(0x7f0000000340)=""/175, &(0x7f0000000400)=0xaf) accept$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) accept$packet(r0, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000500)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000580)={'ip6tnl0\x00', r2, 0x2f, 0xff, 0x6, 0x400, 0x12, @private1, @empty, 0x8000, 0x20, 0xfffffffc, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'ip6_vti0\x00', r6, 0x4, 0x40, 0x80, 0x1f, 0x53, @remote, @mcast2, 0x40, 0x7, 0x6}}) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000700)={0x3, 0x6}, 0x4) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r7, 0x894b, &(0x7f0000000780)) r8 = memfd_secret(0x80000) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f00000007c0)={0x3, 0x1}, 0x4) 15:30:25 executing program 3: setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)="c65ef990d11decc0721c9d23adce23f2c5eaa9cb65ae5ae3c1b9bb150ef68b31fbd3b3e950361d1ff2c329b263451b4d8891d97bc330167d8cd12eb0883839947c1d9a3d71c912fff313a3f3e481b8ffac12036438e4c9cd290e3168453e8459ba7aeee2f99d868ea3baec243651802dfca38e9231379458c48a4d6e49e5f761ac3918733aa2b9af86bc637bd4fb2453177da61394a0f4e28a85d46f9fd8ca53340f948cae06c2520ca7b9e13628b6e0d05b08205dd3d87b4a19ecd4a1bb0e0ca067aa9281b8c6", 0xc7) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000100)=""/132, &(0x7f00000001c0)=0x84) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000200)=""/42, &(0x7f0000000240)=0x2a) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000280)='reno\x00', 0x5) mq_getsetattr(0xffffffffffffffff, &(0x7f00000002c0)={0x8, 0xfffffffffffff68f, 0x7, 0xcc0f}, &(0x7f0000000300)) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000340)={0xdb5, 0x101, 0x401, 0x4}) r0 = syz_open_dev$loop(&(0x7f0000000380), 0x7, 0x80) io_cancel(0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x4, r0, &(0x7f00000003c0)="681b7397c305ba7ff3a311755ce6ca5d719de0f425eeca6c9c6839d11d9127a9f10e733776f6d1153a2db8d503c2bfbb9948c48e2ad0b3be8fd30b4846e3201a5e23e976d5075f7ef1f726e9dd01dd8d308c1b3f78d1ff1f1cbed5d5cbd4501224b19ae30464bb5191a1a160fc19636907c2ac4a076dc6a8f674b3645888c413d514bc24ab007cab90c7790674dcb4a309571df6917ba8453bd9ce9575e2b27b0cea4b9b552075042fb79ba19d7a415ea89b10", 0xb3, 0xfff, 0x0, 0x1}, &(0x7f00000004c0)) openat$vcsa(0xffffffffffffff9c, &(0x7f00000018c0), 0x105200, 0x0) 15:30:25 executing program 1: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"d4c0cadc7862c32b72c9fd760c05ca23", 0x0, 0x0, {0x0, 0x8}, {0x3ff}, 0x1000, [0x6, 0x9, 0x100000000, 0x35e3, 0x200, 0x2, 0xffffffffffff7fff, 0x10000, 0x8, 0x4, 0xff, 0x7049b48f, 0xfff, 0xffffffffffffff01, 0x7, 0x10000]}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3}, 0x1) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"87ccb543c14d08e63a7b0ba432b0a614", r0, r0, {0x7, 0xffffffff}, {0x5, 0x333e}, 0x8, [0x0, 0x4, 0x10001, 0x6, 0x800, 0x3, 0x7, 0x5d, 0x16b7, 0x9, 0x8d76, 0xfffffffffffffff9, 0x0, 0x4, 0x80, 0x5]}) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14, 0x80000) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@ipv4={'\x00', '\xff\xff', @empty}, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5, 0x0, 0x401, 0x100, 0x2, 0x40000040, r2}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@rand_addr=' \x01\x00', @mcast1, @loopback, 0x8, 0x3, 0x5, 0x0, 0x3, 0x0, r2}) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000003c0), 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_DEL_MFC(r4, 0x29, 0xcd, &(0x7f0000000440)={{0xa, 0x4e20, 0x1ff, @local, 0xb07f}, {0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffffffff}, 0x7f, [0x8, 0xfffff801, 0x5, 0xef, 0x7fffffff, 0x581, 0x2, 0xc6b5]}, 0x5c) r5 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_tcp_int(r5, 0x6, 0x4, &(0x7f00000004c0)=0x1, 0x4) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000500)={@local, @remote, @ipv4={'\x00', '\xff\xff', @remote}, 0x5, 0x6, 0xc4, 0x400, 0xffff, 0xa4, r2}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000580)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000000b00)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000600)={0x4b4, 0x13, 0x100, 0x70bd28, 0x25dfdbfe, {0x12, 0x1, 0x2, 0x20, {0x4e23, 0x4e21, [0x1ff, 0x6, 0x83, 0x9], [0x4, 0x400, 0x0, 0x1000], r2, [0x0, 0x7d70dae6]}, 0x20000000, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x98, 0x1, "059b6a667558d3c66dcf091a25471766a25b0cac36aca9a4484e9cf401819e296006c7f789ff62840ca516b9d2b290b8f16d8bec76ec6ac61f77e08ec20bb666a50c0cff81d4c90cd0f45dd00df1748717a64fc96306753dda1a1690d6627aa8bdb85291d11f65631909ed0d9ed5cfb8427d1be0fa9894541309819413fcd530ee4df011dc66387e4914493cf585024d169d8e6f"}, @INET_DIAG_REQ_BYTECODE={0x13, 0x1, "dc71715d25ba6ee08beeddda723dfc"}, @INET_DIAG_REQ_BYTECODE={0xcd, 0x1, "49add60b18e0036c0a16eaf44a81abdb4e83421fb342bdf32d55ea02922c16d837b1f662fadad3afb9280c940af20c1ed5998cb3bfc2b8a1d31b6c79a464e6a88709186dbe1a4895d6222dec8a020816fa710235be1f8b1864b2c79e751b428d9d436f0e38b698deb468eb3ffdb7f43c819480879640233f63742e7104cd75e0784cec9db1be334ce53faa052c5e196964b6279bf0d27f70e2869c6bba9755305d5f6f1658460001f8f40e006f69f198bace92546de1d325b71ad679e02838afc66b6cae2237a10126"}, @INET_DIAG_REQ_BYTECODE={0xb8, 0x1, "24a43a7172daa0a345e28865db7af0d7898b92bbadd1c7d6b8eaa6f8a05795a8ecf9f7d29640c57e09379e74e26e83a82c285fca9fdaf29b4f4aae5457914a8782439e65c710b1105e81944504464bbee0abc77d38d56c5c830c1e3e14fa725f50551e0f2aa47c82a2ae0a548b040f0b993cd0c03932296826466e0e20a25e825fa34febdfb68c70a0bdd4857248b449d14c7dfa5081257e27fb0ed8841595203227e8b9a9edf6dfa6e71cd4ecc481a48b44fed9"}, @INET_DIAG_REQ_BYTECODE={0xf3, 0x1, "9f72c4ce3bf66789cc8bf81aafe5763da16a6419845ecdd391d034940dc78785af0c6264c1e6e935f8c9d58cb11ac66ec7fd2825b780583b16da3e8a1a8b786e05b7ca7b62c66210cd326337219a250dccc4580ae7326c1612c65ee9c70b69655969f39e86a63e2f979fba2ea591e389df04c8ae490a2f039f469bf9473abbe351b505b9d1fe51e9e0b25b71fa58ff69549b62f6671940c4c1ba46c2a84564728b16d9174220eecef8b88e153ca5dacd20687a0a8075ad66f2ac7ea01790fbccbee7c6fc6134c5071d5baf170d9ca622eaa3f34e4a27cc0d7a5b04bfb9f97ab6a7c9cff4f49097548f9cad923f18ac"}, @INET_DIAG_REQ_BYTECODE={0x2f, 0x1, "6e57e41e4bb384c0a698cef4b0dfdfd1a07924d0b199ab872feb015c181629b5e47e71a13949136345bb98"}, @INET_DIAG_REQ_BYTECODE={0x9e, 0x1, "593ed5c78e541f262c3a4c4e817da74e842da407028b248fce2e5a07fbdf1af402edbc9d717eae59eeed9c77bc98f0423eaefc6be3226b6e7f65b8d1f0b7245196233daeb7306837eeef01c5248af4b6049d9eaef7002fa789d797df73319fe2c4fd95f3b47dcd6df2d6b9ca962df181c4bc568fd49312fb7fac088dd004ab8cbe7a363394e666ee28edd76791c9efccac8089a58956ebf59081"}, @INET_DIAG_REQ_BYTECODE={0x70, 0x1, "6ea43988ed441e20c79941a15549a58d5d24d1bd36a1b35de7547742353ed6cc6b6a73426bb5cf187a0ffbac0f1ab2d43b5fd1c77219efc224cabafa0bdd107cc376f449f02f066354a3237fb4eeea6adc4ae50ae4c214ae755a0f7cbb75ab1587cd5c81efd6830302901edc"}]}, 0x4b4}, 0x1, 0x0, 0x0, 0x20000000}, 0x8800) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000c80)={0x3b, 0xd, '\x00', [@enc_lim={0x4, 0x1, 0x7f}, @ra={0x5, 0x2, 0x7f}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x2, 0xc, 0x7f, 0x4, [0x2, 0x3, 0xffffffffffff896e, 0x3, 0xf17, 0x400]}}, @ra={0x5, 0x2, 0x1}, @jumbo={0xc2, 0x4, 0x4}, @enc_lim, @jumbo={0xc2, 0x4, 0x2d}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, 0x78) 15:30:25 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x800, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000080), 0xd1dc, 0x28000) setsockopt$inet6_tcp_int(r1, 0x6, 0x3, &(0x7f00000000c0)=0x3, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100), 0x4) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000140)={0x41, {{0xa, 0x4e22, 0x40, @mcast1, 0x4}}, 0x0, 0x7, [{{0xa, 0x4e21, 0x8000, @private0, 0x7fff}}, {{0xa, 0x4e24, 0x2, @remote, 0x800}}, {{0xa, 0x4e21, 0x0, @mcast2, 0x7}}, {{0xa, 0x4e23, 0x6, @local, 0x20}}, {{0xa, 0x4e20, 0xef8, @loopback, 0x1}}, {{0xa, 0x4e20, 0x5, @local, 0x1}}, {{0xa, 0x4e24, 0x8, @mcast1, 0xda}}]}, 0x410) r2 = syz_open_dev$mouse(&(0x7f0000000580), 0x1000, 0x400) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f00000005c0)) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000600), 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000640)={0xfffffffffffffffb, [], 0x81, "73777614b01e26"}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000001640)={{0x0, 0x9, 0x2, 0xff, 0x3, 0x2, 0x3, 0x1ff, 0x3f, 0x1f, 0x5, 0x8, 0x3, 0x81, 0xa1}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000002640)={{0x0, 0x3, 0x3ff, 0x7fff, 0x6, 0x8, 0x80, 0x7, 0x9, 0x4d, 0x5, 0x4, 0x2, 0x9, 0x100000000}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000026c0)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000028c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000002ac0)={0x7fff, [], 0xff, "461807b49ae465"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000003ac0)) 15:30:25 executing program 5: ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000000)={0x0, 0x1ff, 0x8798}) mq_timedsend(0xffffffffffffffff, &(0x7f0000000040)="48f82bdea935cfba16267b6f7306e05a79674cd19b67f551", 0x18, 0x6, &(0x7f0000000080)={0x0, 0x989680}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) syz_io_uring_setup(0x20f, &(0x7f0000000100)={0x0, 0xc87d, 0x20, 0x2, 0x52, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) write$selinux_attr(r0, &(0x7f0000000200)='system_u:object_r:system_dbusd_var_lib_t:s0\x00', 0x2c) r1 = accept4$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000003c0), 0x1e5dc0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000480)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x80, r1, &(0x7f00000002c0)="8a409233828523bdcd6d501faa5e1460f31273cb0e90f906deeaa187a3e4d01b9eb516edcf920909c5f9366342524eccc49ff4ff3cf3dceb24521763b412c9fa06889edda15de61e84b61e520f8fbe63ea33743cb3fa7c13448db3cab1c1f282d058de3c599c4dee20a44fac6d2a98440c797b0776b4a9eb851fd7d6e6436e6a1db16e60f8ec9ddc062899df0f4d6e3d66de46670f14ad1ac6104fa708252a7462c043e34ecf5bcbc574dfee79561dc46553cc34", 0xb4, 0x0, 0x0, 0x0, r0}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2, 0x7, r2, &(0x7f0000000400)="ad71d632f4", 0x5, 0x9, 0x0, 0x2, r0}]) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000004c0)={0x0, 0x0, 0xffffffffffffffff, 0x4}) r3 = io_uring_setup(0x4c8e, &(0x7f0000000500)={0x0, 0x9d84, 0x1c, 0x2, 0x2fa, 0x0, r0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000580)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e20, 0x40, @empty, 0xd79b}}, 0x0, 0x0, 0x16, 0x0, "85d1191a58a2f27de4b44902caab4f42f235350c98f6489f2104d03d0cc56fb000dcef26f89f8ea46e2603754aeedb6f43b20d5c02bdf413d1f79ebdff0cb32090501722e56a785934df82838a5adefb"}, 0xd8) io_submit(0x0, 0x4, &(0x7f0000000cc0)=[&(0x7f0000000940)={0x0, 0x0, 0x0, 0x5, 0x20, r2, &(0x7f00000008c0)="0da7c1c104a5bdd590baa52dbb623f18626a0ce931f33251569345f0511a79fe9b84fe019489a72822f092ebc936812f4bca334d984b0afa9ab7443a32564ab3427a56d4be44a70e103ff44f", 0x4c, 0x7, 0x0, 0x1, r2}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x6, 0x5, r1, &(0x7f0000000980)="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", 0xfb, 0x4}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, &(0x7f0000000b00), 0x0, 0x100000001, 0x0, 0x1, r2}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x7, 0x3, r3, &(0x7f0000000b80)="0fb2829617d6993a6e18a9a36c5f43050533b08bc7362076e39b70219615a58b12d72664b5d794fbd2a176080c971cbbb0ce3a88e6b464201baaf13a6e51580988cfcdc7e39e4da737461f51cbac8d01cb8878d9452ca6b4ef0b6f3f105030e735dc59320c4991e0ae5af33c0dcd7092cd9f37ce3cc31bcb68f890b691423dbed08603901f801187de00cf68cbad3ff6ae9b0d574fd449081867438ba72b42721b2bcea6a318c7651b57095358324f5eb068e6efea560341535a3fea74ca1e7825ab68c3a290e3e8a85bca958f065713cc53cb7db904e3a7933a06b7c00fe7b1d632c2c313b496", 0xe7, 0x1, 0x0, 0x1, r0}]) 15:30:25 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0xf8, 0x0, &(0x7f0000000380)=[@enter_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0x7, 0x1, 0x7}, @fd, @flat=@handle={0x73682a85, 0xb}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}}, @register_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/66, 0x42, 0x1, 0x32}, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x34}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x40}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x60, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/170, 0xaa, 0x1, 0x22}, @flat=@weak_binder={0x77622a85, 0xa, 0x2}, @fda={0x66646185, 0xa, 0x4, 0x2a}}, &(0x7f0000000340)={0x0, 0x28, 0x40}}}, @dead_binder_done], 0xfb, 0x0, &(0x7f0000000480)="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"}) io_submit(0x0, 0x0, &(0x7f00000005c0)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x10000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000640)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000840)={0x20, [], 0x98, "e333e58853c5fa"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001840)) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001a40)={{0x0, 0xa3, 0x190b, 0x4, 0xdc3, 0x7, 0x9, 0x9f, 0xfffffffb, 0x200, 0x3f, 0x1, 0xffff, 0x400, 0x10000000}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001ac0)={{0x0, 0x9, 0x8, 0xffffffff, 0x3, 0x1, 0x1, 0x9, 0xf946, 0x7, 0x4, 0xd48, 0x3, 0x7fffffff, 0xfffffffffffff001}, 0x8, [0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001b40)) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001d40)={{0x0, 0x40, 0x7fff, 0x2, 0x101, 0x4, 0x7fff, 0x1, 0xfffffe00, 0x35, 0x3ff, 0x1ff, 0x3, 0xca, 0x1}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002d40)={0x1000, [], 0x3f, "4dd071380578dc"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000003d40)={{0x0, 0x6, 0x0, 0x7, 0x5, 0xfffffffffffffffc, 0x7, 0x4, 0xff, 0x20, 0x1ff, 0x4000, 0x2ae, 0x5, 0xff}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000004d40)={0x7fffffff, [], 0x3f, "ce40b9754ac8e1"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000005d40)={0x1ff, [], 0x3, "957c6398ec9700"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000006d40)={{0x0, 0xfffffffffffffffd, 0xff, 0x0, 0xd2e8, 0x8b3f, 0x4, 0xf936, 0x2, 0x5, 0x6, 0xd69, 0x2, 0x7, 0x200}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000007d40)) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000007f40)={{0x0, 0x4, 0x5, 0x7, 0xffffffff, 0x3, 0x10000, 0x75, 0x0, 0x80000001, 0x80000000, 0x6, 0x526d45fb, 0x9, 0xfff}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000008f40)) 15:30:25 executing program 6: getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl0\x00', r1, 0x4, 0xbe, 0x3, 0x8, 0x2, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x1, 0x38bc, 0x3}}) r3 = accept$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) accept$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f00000002c0)={@mcast2, 0x60, r4}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x382c6ac8}}, './file0\x00'}) getsockopt$inet_tcp_buf(r5, 0x6, 0x1c, &(0x7f0000000340)=""/175, &(0x7f0000000400)=0xaf) accept$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) accept$packet(r0, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000500)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000580)={'ip6tnl0\x00', r2, 0x2f, 0xff, 0x6, 0x400, 0x12, @private1, @empty, 0x8000, 0x20, 0xfffffffc, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'ip6_vti0\x00', r6, 0x4, 0x40, 0x80, 0x1f, 0x53, @remote, @mcast2, 0x40, 0x7, 0x6}}) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000700)={0x3, 0x6}, 0x4) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r7, 0x894b, &(0x7f0000000780)) memfd_secret(0x80000) 15:30:25 executing program 1: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"d4c0cadc7862c32b72c9fd760c05ca23", 0x0, 0x0, {0x0, 0x8}, {0x3ff}, 0x1000, [0x6, 0x9, 0x100000000, 0x35e3, 0x200, 0x2, 0xffffffffffff7fff, 0x10000, 0x8, 0x4, 0xff, 0x7049b48f, 0xfff, 0xffffffffffffff01, 0x7, 0x10000]}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3}, 0x1) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"87ccb543c14d08e63a7b0ba432b0a614", r0, r0, {0x7, 0xffffffff}, {0x5, 0x333e}, 0x8, [0x0, 0x4, 0x10001, 0x6, 0x800, 0x3, 0x7, 0x5d, 0x16b7, 0x9, 0x8d76, 0xfffffffffffffff9, 0x0, 0x4, 0x80, 0x5]}) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14, 0x80000) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@ipv4={'\x00', '\xff\xff', @empty}, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5, 0x0, 0x401, 0x100, 0x2, 0x40000040, r2}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@rand_addr=' \x01\x00', @mcast1, @loopback, 0x8, 0x3, 0x5, 0x0, 0x3, 0x0, r2}) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000003c0), 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000440)={{0xa, 0x4e20, 0x1ff, @local, 0xb07f}, {0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffffffff}, 0x7f, [0x8, 0xfffff801, 0x5, 0xef, 0x7fffffff, 0x581, 0x2, 0xc6b5]}, 0x5c) r4 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x4, &(0x7f00000004c0)=0x1, 0x4) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000500)={@local, @remote, @ipv4={'\x00', '\xff\xff', @remote}, 0x5, 0x6, 0xc4, 0x400, 0xffff, 0xa4, r2}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000580)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000c80)={0x3b, 0xd, '\x00', [@enc_lim={0x4, 0x1, 0x7f}, @ra={0x5, 0x2, 0x7f}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x2, 0xc, 0x7f, 0x4, [0x2, 0x3, 0xffffffffffff896e, 0x3, 0xf17, 0x400]}}, @ra={0x5, 0x2, 0x1}, @jumbo={0xc2, 0x4, 0x4}, @enc_lim, @jumbo={0xc2, 0x4, 0x2d}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, 0x78) 15:30:25 executing program 3: setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)="c65ef990d11decc0721c9d23adce23f2c5eaa9cb65ae5ae3c1b9bb150ef68b31fbd3b3e950361d1ff2c329b263451b4d8891d97bc330167d8cd12eb0883839947c1d9a3d71c912fff313a3f3e481b8ffac12036438e4c9cd290e3168453e8459ba7aeee2f99d868ea3baec243651802dfca38e9231379458c48a4d6e49e5f761ac3918733aa2b9af86bc637bd4fb2453177da61394a0f4e28a85d46f9fd8ca53340f948cae06c2520ca7b9e13628b6e0d05b08205dd3d87b4a19ecd4a1bb0e0ca067aa9281b8c6", 0xc7) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000100)=""/132, &(0x7f00000001c0)=0x84) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000200)=""/42, &(0x7f0000000240)=0x2a) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000280)='reno\x00', 0x5) mq_getsetattr(0xffffffffffffffff, &(0x7f00000002c0)={0x8, 0xfffffffffffff68f, 0x7, 0xcc0f}, &(0x7f0000000300)) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000340)={0xdb5, 0x101, 0x401, 0x4}) r0 = syz_open_dev$loop(&(0x7f0000000380), 0x7, 0x80) io_cancel(0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x4, r0, &(0x7f00000003c0)="681b7397c305ba7ff3a311755ce6ca5d719de0f425eeca6c9c6839d11d9127a9f10e733776f6d1153a2db8d503c2bfbb9948c48e2ad0b3be8fd30b4846e3201a5e23e976d5075f7ef1f726e9dd01dd8d308c1b3f78d1ff1f1cbed5d5cbd4501224b19ae30464bb5191a1a160fc19636907c2ac4a076dc6a8f674b3645888c413d514bc24ab007cab90c7790674dcb4a309571df6917ba8453bd9ce9575e2b27b0cea4b9b552075042fb79ba19d7a415ea89b10", 0xb3, 0xfff, 0x0, 0x1}, &(0x7f00000004c0)) openat$vcsa(0xffffffffffffff9c, &(0x7f00000018c0), 0x105200, 0x0) 15:30:37 executing program 3: setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)="c65ef990d11decc0721c9d23adce23f2c5eaa9cb65ae5ae3c1b9bb150ef68b31fbd3b3e950361d1ff2c329b263451b4d8891d97bc330167d8cd12eb0883839947c1d9a3d71c912fff313a3f3e481b8ffac12036438e4c9cd290e3168453e8459ba7aeee2f99d868ea3baec243651802dfca38e9231379458c48a4d6e49e5f761ac3918733aa2b9af86bc637bd4fb2453177da61394a0f4e28a85d46f9fd8ca53340f948cae06c2520ca7b9e13628b6e0d05b08205dd3d87b4a19ecd4a1bb0e0ca067aa9281b8c6", 0xc7) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000100)=""/132, &(0x7f00000001c0)=0x84) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000200)=""/42, &(0x7f0000000240)=0x2a) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000280)='reno\x00', 0x5) mq_getsetattr(0xffffffffffffffff, &(0x7f00000002c0)={0x8, 0xfffffffffffff68f, 0x7, 0xcc0f}, &(0x7f0000000300)) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000340)={0xdb5, 0x101, 0x401, 0x4}) r0 = syz_open_dev$loop(&(0x7f0000000380), 0x7, 0x80) io_cancel(0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x4, r0, &(0x7f00000003c0)="681b7397c305ba7ff3a311755ce6ca5d719de0f425eeca6c9c6839d11d9127a9f10e733776f6d1153a2db8d503c2bfbb9948c48e2ad0b3be8fd30b4846e3201a5e23e976d5075f7ef1f726e9dd01dd8d308c1b3f78d1ff1f1cbed5d5cbd4501224b19ae30464bb5191a1a160fc19636907c2ac4a076dc6a8f674b3645888c413d514bc24ab007cab90c7790674dcb4a309571df6917ba8453bd9ce9575e2b27b0cea4b9b552075042fb79ba19d7a415ea89b10", 0xb3, 0xfff, 0x0, 0x1}, &(0x7f00000004c0)) openat$vcsa(0xffffffffffffff9c, &(0x7f00000018c0), 0x105200, 0x0) 15:30:37 executing program 4: r0 = socket(0x28, 0x800, 0x68770a22) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000080)={0x3f, {{0xa, 0x4e20, 0x1c9e, @remote, 0x7}}}, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000140)={'raw\x00', 0x2, [{}, {}]}, 0x48) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x90001, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000200)={'mangle\x00', 0x3, [{}, {}, {}]}, 0x58) r3 = socket(0x22, 0x5, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000280)=0x4, 0x4) r4 = socket(0x22, 0x2, 0xb0) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f00000002c0)={0x1}, 0x4) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/custom1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000480)={0x1c, 0x0, &(0x7f0000000340)=[@clear_death={0x400c630f, 0x2}, @exit_looper, @increfs={0x40046304, 0x3}], 0xc8, 0x0, &(0x7f0000000380)="945a2582e97415526fcffb6e6ffc35829949b698c3ab57af9a20f64c973221b872f70463e96f9459c9dc1a30c8fe2fcedd4c36b65debe6c3eaccc3b81ff761ff0b1fd2ebecc5ff0af654bcfcc2cf0e00025660a75887f400e42c45b0439f8d01542f5794e90ae9dde422c38e6b61b79ffe7c8a7b1be9a30f902d3fa6bb4907a4668dce3fd1165d0b5dc275f5f01f470c7c6a746b18dddc84bf4b89b00ddb68d4e9fe77f60f17a7f1422d8feb01ca02b59447c5bce41060d28dae608fad37fbd9942b955be74daca8"}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000005c0)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/156, 0x9c, 0x1, &(0x7f0000000580)=""/35, 0x23}, &(0x7f0000000600)=0x40) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000640)={0x80000001, {{0xa, 0x4e21, 0x10000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x200}}}, 0x88) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index=0x4, 0x0, 0x0, 0x6, 0x0, 0x0, {0x0, 0x0, r4}}, 0x80) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000880)={@local, 0x1c}) 15:30:37 executing program 6: getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl0\x00', r1, 0x4, 0xbe, 0x3, 0x8, 0x2, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x1, 0x38bc, 0x3}}) r3 = accept$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) accept$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f00000002c0)={@mcast2, 0x60, r4}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x382c6ac8}}, './file0\x00'}) getsockopt$inet_tcp_buf(r5, 0x6, 0x1c, &(0x7f0000000340)=""/175, &(0x7f0000000400)=0xaf) accept$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) accept$packet(r0, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000500)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000580)={'ip6tnl0\x00', r2, 0x2f, 0xff, 0x6, 0x400, 0x12, @private1, @empty, 0x8000, 0x20, 0xfffffffc, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'ip6_vti0\x00', r6, 0x4, 0x40, 0x80, 0x1f, 0x53, @remote, @mcast2, 0x40, 0x7, 0x6}}) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000700)={0x3, 0x6}, 0x4) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x200000, 0x0) memfd_secret(0x80000) 15:30:37 executing program 5: ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000000)={0x0, 0x1ff, 0x8798}) mq_timedsend(0xffffffffffffffff, &(0x7f0000000040)="48f82bdea935cfba16267b6f7306e05a79674cd19b67f551", 0x18, 0x6, &(0x7f0000000080)={0x0, 0x989680}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) syz_io_uring_setup(0x20f, &(0x7f0000000100)={0x0, 0xc87d, 0x20, 0x2, 0x52, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) write$selinux_attr(r0, &(0x7f0000000200)='system_u:object_r:system_dbusd_var_lib_t:s0\x00', 0x2c) r1 = accept4$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000003c0), 0x1e5dc0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000480)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x80, r1, &(0x7f00000002c0)="8a409233828523bdcd6d501faa5e1460f31273cb0e90f906deeaa187a3e4d01b9eb516edcf920909c5f9366342524eccc49ff4ff3cf3dceb24521763b412c9fa06889edda15de61e84b61e520f8fbe63ea33743cb3fa7c13448db3cab1c1f282d058de3c599c4dee20a44fac6d2a98440c797b0776b4a9eb851fd7d6e6436e6a1db16e60f8ec9ddc062899df0f4d6e3d66de46670f14ad1ac6104fa708252a7462c043e34ecf5bcbc574dfee79561dc46553cc34", 0xb4, 0x0, 0x0, 0x0, r0}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2, 0x7, r2, &(0x7f0000000400)="ad71d632f4", 0x5, 0x9, 0x0, 0x2, r0}]) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000004c0)={0x0, 0x0, 0xffffffffffffffff, 0x4}) r3 = io_uring_setup(0x4c8e, &(0x7f0000000500)={0x0, 0x9d84, 0x1c, 0x2, 0x2fa, 0x0, r0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000580)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e20, 0x40, @empty, 0xd79b}}, 0x0, 0x0, 0x16, 0x0, "85d1191a58a2f27de4b44902caab4f42f235350c98f6489f2104d03d0cc56fb000dcef26f89f8ea46e2603754aeedb6f43b20d5c02bdf413d1f79ebdff0cb32090501722e56a785934df82838a5adefb"}, 0xd8) io_submit(0x0, 0x4, &(0x7f0000000cc0)=[&(0x7f0000000940)={0x0, 0x0, 0x0, 0x5, 0x20, r2, &(0x7f00000008c0)="0da7c1c104a5bdd590baa52dbb623f18626a0ce931f33251569345f0511a79fe9b84fe019489a72822f092ebc936812f4bca334d984b0afa9ab7443a32564ab3427a56d4be44a70e103ff44f", 0x4c, 0x7, 0x0, 0x1, r2}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x6, 0x5, r1, &(0x7f0000000980)="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", 0xfb, 0x4}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, &(0x7f0000000b00), 0x0, 0x100000001, 0x0, 0x1, r2}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x7, 0x3, r3, &(0x7f0000000b80)="0fb2829617d6993a6e18a9a36c5f43050533b08bc7362076e39b70219615a58b12d72664b5d794fbd2a176080c971cbbb0ce3a88e6b464201baaf13a6e51580988cfcdc7e39e4da737461f51cbac8d01cb8878d9452ca6b4ef0b6f3f105030e735dc59320c4991e0ae5af33c0dcd7092cd9f37ce3cc31bcb68f890b691423dbed08603901f801187de00cf68cbad3ff6ae9b0d574fd449081867438ba72b42721b2bcea6a318c7651b57095358324f5eb068e6efea560341535a3fea74ca1e7825ab68c3a290e3e8a85bca958f065713cc53cb7db904e3a7933a06b7c00fe7b1d632c2c313b496", 0xe7, 0x1, 0x0, 0x1, r0}]) 15:30:37 executing program 1: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"d4c0cadc7862c32b72c9fd760c05ca23", 0x0, 0x0, {0x0, 0x8}, {0x3ff}, 0x1000, [0x6, 0x9, 0x100000000, 0x35e3, 0x200, 0x2, 0xffffffffffff7fff, 0x10000, 0x8, 0x4, 0xff, 0x7049b48f, 0xfff, 0xffffffffffffff01, 0x7, 0x10000]}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3}, 0x1) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"87ccb543c14d08e63a7b0ba432b0a614", r0, r0, {0x7, 0xffffffff}, {0x5, 0x333e}, 0x8, [0x0, 0x4, 0x10001, 0x6, 0x800, 0x3, 0x7, 0x5d, 0x16b7, 0x9, 0x8d76, 0xfffffffffffffff9, 0x0, 0x4, 0x80, 0x5]}) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14, 0x80000) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@ipv4={'\x00', '\xff\xff', @empty}, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5, 0x0, 0x401, 0x100, 0x2, 0x40000040, r2}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@rand_addr=' \x01\x00', @mcast1, @loopback, 0x8, 0x3, 0x5, 0x0, 0x3, 0x0, r2}) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000003c0), 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000440)={{0xa, 0x4e20, 0x1ff, @local, 0xb07f}, {0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffffffff}, 0x7f, [0x8, 0xfffff801, 0x5, 0xef, 0x7fffffff, 0x581, 0x2, 0xc6b5]}, 0x5c) r4 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x4, &(0x7f00000004c0)=0x1, 0x4) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000500)={@local, @remote, @ipv4={'\x00', '\xff\xff', @remote}, 0x5, 0x6, 0xc4, 0x400, 0xffff, 0xa4, r2}) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000c80)={0x3b, 0xd, '\x00', [@enc_lim={0x4, 0x1, 0x7f}, @ra={0x5, 0x2, 0x7f}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x2, 0xc, 0x7f, 0x4, [0x2, 0x3, 0xffffffffffff896e, 0x3, 0xf17, 0x400]}}, @ra={0x5, 0x2, 0x1}, @jumbo={0xc2, 0x4, 0x4}, @enc_lim, @jumbo={0xc2, 0x4, 0x2d}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, 0x78) 15:30:37 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x800, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000080), 0xd1dc, 0x28000) setsockopt$inet6_tcp_int(r1, 0x6, 0x3, &(0x7f00000000c0)=0x3, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100), 0x4) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000140)={0x41, {{0xa, 0x4e22, 0x40, @mcast1, 0x4}}, 0x0, 0x7, [{{0xa, 0x4e21, 0x8000, @private0, 0x7fff}}, {{0xa, 0x4e24, 0x2, @remote, 0x800}}, {{0xa, 0x4e21, 0x0, @mcast2, 0x7}}, {{0xa, 0x4e23, 0x6, @local, 0x20}}, {{0xa, 0x4e20, 0xef8, @loopback, 0x1}}, {{0xa, 0x4e20, 0x5, @local, 0x1}}, {{0xa, 0x4e24, 0x8, @mcast1, 0xda}}]}, 0x410) r2 = syz_open_dev$mouse(&(0x7f0000000580), 0x1000, 0x400) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f00000005c0)) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000600), 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000640)={0xfffffffffffffffb, [], 0x81, "73777614b01e26"}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000001640)={{0x0, 0x9, 0x2, 0xff, 0x3, 0x2, 0x3, 0x1ff, 0x3f, 0x1f, 0x5, 0x8, 0x3, 0x81, 0xa1}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000002640)={{0x0, 0x3, 0x3ff, 0x7fff, 0x6, 0x8, 0x80, 0x7, 0x9, 0x4d, 0x5, 0x4, 0x2, 0x9, 0x100000000}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000026c0)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000028c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000002ac0)={0x7fff, [], 0xff, "461807b49ae465"}) 15:30:37 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0xf8, 0x0, &(0x7f0000000380)=[@enter_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0x7, 0x1, 0x7}, @fd, @flat=@handle={0x73682a85, 0xb}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}}, @register_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/66, 0x42, 0x1, 0x32}, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x34}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x40}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x60, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/170, 0xaa, 0x1, 0x22}, @flat=@weak_binder={0x77622a85, 0xa, 0x2}, @fda={0x66646185, 0xa, 0x4, 0x2a}}, &(0x7f0000000340)={0x0, 0x28, 0x40}}}, @dead_binder_done], 0xfb, 0x0, &(0x7f0000000480)="867e5e8549e01f61e324db6a49b7fbba0ba9627b7ef97b2e7191ae2b10dffa462b90c2a4946551efb146e957821842d7df820d7f6398ecd1d1a4114d85758708a607826096e0f8f4d4da1b7635885eb570e884683ea03d28588d46544f9aee7ea507ee8d5341ddb8c62b60798ddce6a0821b105b713cf4b1d698cccfb61cbd7a34ec8046f53501af7bae3cfc35375a2564e209ca15dad52cc8939f482282d53d96a266560dde6db82d8d95e356bd823a52bca09a8a4426f0146c98d0561cfee3cbdb31520485170ef6e9fb2ea3a2cc40545e50e90762969190b3983d6775430ae751bba7b057a85b37b3ded67a6784b1e752aca50ecdf14c06a86d"}) io_submit(0x0, 0x0, &(0x7f00000005c0)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x10000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000640)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000840)={0x20, [], 0x98, "e333e58853c5fa"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001840)) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001a40)={{0x0, 0xa3, 0x190b, 0x4, 0xdc3, 0x7, 0x9, 0x9f, 0xfffffffb, 0x200, 0x3f, 0x1, 0xffff, 0x400, 0x10000000}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001ac0)={{0x0, 0x9, 0x8, 0xffffffff, 0x3, 0x1, 0x1, 0x9, 0xf946, 0x7, 0x4, 0xd48, 0x3, 0x7fffffff, 0xfffffffffffff001}, 0x8, [0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001b40)) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001d40)={{0x0, 0x40, 0x7fff, 0x2, 0x101, 0x4, 0x7fff, 0x1, 0xfffffe00, 0x35, 0x3ff, 0x1ff, 0x3, 0xca, 0x1}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002d40)={0x1000, [], 0x3f, "4dd071380578dc"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000003d40)={{0x0, 0x6, 0x0, 0x7, 0x5, 0xfffffffffffffffc, 0x7, 0x4, 0xff, 0x20, 0x1ff, 0x4000, 0x2ae, 0x5, 0xff}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000004d40)={0x7fffffff, [], 0x3f, "ce40b9754ac8e1"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000005d40)={0x1ff, [], 0x3, "957c6398ec9700"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000006d40)={{0x0, 0xfffffffffffffffd, 0xff, 0x0, 0xd2e8, 0x8b3f, 0x4, 0xf936, 0x2, 0x5, 0x6, 0xd69, 0x2, 0x7, 0x200}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000007d40)) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000007f40)={{0x0, 0x4, 0x5, 0x7, 0xffffffff, 0x3, 0x10000, 0x75, 0x0, 0x80000001, 0x80000000, 0x6, 0x526d45fb, 0x9, 0xfff}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000008f40)) 15:30:37 executing program 7: setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)={0x5e, 0x2, 0x1, 0x3, 0x0, [@dev={0xfe, 0x80, '\x00', 0x10}]}, 0x18) r0 = syz_io_uring_complete(0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14, 0x80800) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000000c0)={@local, r1}, 0x14) getsockname$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000140)=0x1c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4) r4 = socket(0x21, 0x4, 0x401) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f00000002c0)={0x1, {{0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}}}, 0x88) setsockopt$inet6_buf(r4, 0x29, 0xdb, &(0x7f0000000380)="e0b164be7942560e0ef6298eb798f9af0f7faad8459c120e15db44d6355d096b94333aad7459675c54de1aaaf09bf6ab0a8955d07cf9ad8d84a32817ac2d75aec9959d9a7714c633a1ace7fe3079c4e413dd7d8e4adeaa2a96e5b0ef522f", 0x5e) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000500)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000540)={@private2={0xfc, 0x2, '\x00', 0x1}, r5}, 0x14) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8}, 0x20002800) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000006c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x29, 0x2d, &(0x7f0000000800)={0x0, {{0xa, 0x4e22, 0x80, @remote, 0x54a58250}}}, 0x88) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000ac0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a80)={&(0x7f0000000900)={0x148, 0x13, 0x1, 0x70bd26, 0x25dfdbff, {0x5, 0x60, 0xf4, 0xd6, {0x4e22, 0x4e21, [0x6, 0x5, 0x5, 0x4], [0x401, 0x800, 0xd0b, 0x4780ac06], 0x0, [0x6, 0x1f]}, 0x4, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x81, 0x1, "ac3c6c9807a01910bef05b51585092ca051702e63fb24c836e08b86e5f63cd32a73299862b0608b52b8c03f5a348656dca60350e75e6a81533358395de6ee1333ab8a1426e058d09d4d21f71eeeffbe3b47b6cc998f529647ab76faaaec3de4b0a89b7f96a84cfbf3fa0ba2d7b18dc1e939d5ee83bc79181144c3d13b5"}, @INET_DIAG_REQ_BYTECODE={0x75, 0x1, "31d5fbd06ea3a7f821defa49fa6a4d8b7e9f2d097b5ed55043216ed4ea4b1558da8ec748a8f9d6ded8dc061e9419ba8f18e5642877cfca5520b72b17f0c7ead97af28baa7b96e6181016dd3eefe52ade56d88d64462803e51639a134ec3fca447bb3a986c58fed7b57dc24a4e7286a0c8f"}]}, 0x148}, 0x1, 0x0, 0x0, 0x40000}, 0x41) 15:30:37 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0xf8, 0x0, &(0x7f0000000380)=[@enter_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0x7, 0x1, 0x7}, @fd, @flat=@handle={0x73682a85, 0xb}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}}, @register_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/66, 0x42, 0x1, 0x32}, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x34}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x40}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x60, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/170, 0xaa, 0x1, 0x22}, @flat=@weak_binder={0x77622a85, 0xa, 0x2}, @fda={0x66646185, 0xa, 0x4, 0x2a}}, &(0x7f0000000340)={0x0, 0x28, 0x40}}}, @dead_binder_done], 0xfb, 0x0, &(0x7f0000000480)="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"}) io_submit(0x0, 0x0, &(0x7f00000005c0)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x10000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000640)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000840)={0x20, [], 0x98, "e333e58853c5fa"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001840)) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001a40)={{0x0, 0xa3, 0x190b, 0x4, 0xdc3, 0x7, 0x9, 0x9f, 0xfffffffb, 0x200, 0x3f, 0x1, 0xffff, 0x400, 0x10000000}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001ac0)={{0x0, 0x9, 0x8, 0xffffffff, 0x3, 0x1, 0x1, 0x9, 0xf946, 0x7, 0x4, 0xd48, 0x3, 0x7fffffff, 0xfffffffffffff001}, 0x8, [0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001b40)) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001d40)={{0x0, 0x40, 0x7fff, 0x2, 0x101, 0x4, 0x7fff, 0x1, 0xfffffe00, 0x35, 0x3ff, 0x1ff, 0x3, 0xca, 0x1}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002d40)={0x1000, [], 0x3f, "4dd071380578dc"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000003d40)={{0x0, 0x6, 0x0, 0x7, 0x5, 0xfffffffffffffffc, 0x7, 0x4, 0xff, 0x20, 0x1ff, 0x4000, 0x2ae, 0x5, 0xff}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000004d40)={0x7fffffff, [], 0x3f, "ce40b9754ac8e1"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000005d40)={0x1ff, [], 0x3, "957c6398ec9700"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000006d40)={{0x0, 0xfffffffffffffffd, 0xff, 0x0, 0xd2e8, 0x8b3f, 0x4, 0xf936, 0x2, 0x5, 0x6, 0xd69, 0x2, 0x7, 0x200}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000007d40)) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000007f40)={{0x0, 0x4, 0x5, 0x7, 0xffffffff, 0x3, 0x10000, 0x75, 0x0, 0x80000001, 0x80000000, 0x6, 0x526d45fb, 0x9, 0xfff}}) 15:30:37 executing program 6: getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl0\x00', r1, 0x4, 0xbe, 0x3, 0x8, 0x2, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x1, 0x38bc, 0x3}}) r3 = accept$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) accept$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f00000002c0)={@mcast2, 0x60, r4}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x382c6ac8}}, './file0\x00'}) getsockopt$inet_tcp_buf(r5, 0x6, 0x1c, &(0x7f0000000340)=""/175, &(0x7f0000000400)=0xaf) accept$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) accept$packet(r0, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000500)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000580)={'ip6tnl0\x00', r2, 0x2f, 0xff, 0x6, 0x400, 0x12, @private1, @empty, 0x8000, 0x20, 0xfffffffc, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'ip6_vti0\x00', r6, 0x4, 0x40, 0x80, 0x1f, 0x53, @remote, @mcast2, 0x40, 0x7, 0x6}}) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000700)={0x3, 0x6}, 0x4) memfd_secret(0x80000) 15:30:37 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x800, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000080), 0xd1dc, 0x28000) setsockopt$inet6_tcp_int(r1, 0x6, 0x3, &(0x7f00000000c0)=0x3, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100), 0x4) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000140)={0x41, {{0xa, 0x4e22, 0x40, @mcast1, 0x4}}, 0x0, 0x7, [{{0xa, 0x4e21, 0x8000, @private0, 0x7fff}}, {{0xa, 0x4e24, 0x2, @remote, 0x800}}, {{0xa, 0x4e21, 0x0, @mcast2, 0x7}}, {{0xa, 0x4e23, 0x6, @local, 0x20}}, {{0xa, 0x4e20, 0xef8, @loopback, 0x1}}, {{0xa, 0x4e20, 0x5, @local, 0x1}}, {{0xa, 0x4e24, 0x8, @mcast1, 0xda}}]}, 0x410) r2 = syz_open_dev$mouse(&(0x7f0000000580), 0x1000, 0x400) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f00000005c0)) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000600), 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000640)={0xfffffffffffffffb, [], 0x81, "73777614b01e26"}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000001640)={{0x0, 0x9, 0x2, 0xff, 0x3, 0x2, 0x3, 0x1ff, 0x3f, 0x1f, 0x5, 0x8, 0x3, 0x81, 0xa1}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000002640)={{0x0, 0x3, 0x3ff, 0x7fff, 0x6, 0x8, 0x80, 0x7, 0x9, 0x4d, 0x5, 0x4, 0x2, 0x9, 0x100000000}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000026c0)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000028c0)) 15:30:37 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0xf8, 0x0, &(0x7f0000000380)=[@enter_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0x7, 0x1, 0x7}, @fd, @flat=@handle={0x73682a85, 0xb}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}}, @register_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/66, 0x42, 0x1, 0x32}, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x34}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x40}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x60, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/170, 0xaa, 0x1, 0x22}, @flat=@weak_binder={0x77622a85, 0xa, 0x2}, @fda={0x66646185, 0xa, 0x4, 0x2a}}, &(0x7f0000000340)={0x0, 0x28, 0x40}}}, @dead_binder_done], 0xfb, 0x0, &(0x7f0000000480)="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"}) io_submit(0x0, 0x0, &(0x7f00000005c0)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x10000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000640)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000840)={0x20, [], 0x98, "e333e58853c5fa"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001840)) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001a40)={{0x0, 0xa3, 0x190b, 0x4, 0xdc3, 0x7, 0x9, 0x9f, 0xfffffffb, 0x200, 0x3f, 0x1, 0xffff, 0x400, 0x10000000}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001ac0)={{0x0, 0x9, 0x8, 0xffffffff, 0x3, 0x1, 0x1, 0x9, 0xf946, 0x7, 0x4, 0xd48, 0x3, 0x7fffffff, 0xfffffffffffff001}, 0x8, [0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001b40)) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001d40)={{0x0, 0x40, 0x7fff, 0x2, 0x101, 0x4, 0x7fff, 0x1, 0xfffffe00, 0x35, 0x3ff, 0x1ff, 0x3, 0xca, 0x1}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002d40)={0x1000, [], 0x3f, "4dd071380578dc"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000003d40)={{0x0, 0x6, 0x0, 0x7, 0x5, 0xfffffffffffffffc, 0x7, 0x4, 0xff, 0x20, 0x1ff, 0x4000, 0x2ae, 0x5, 0xff}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000004d40)={0x7fffffff, [], 0x3f, "ce40b9754ac8e1"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000005d40)={0x1ff, [], 0x3, "957c6398ec9700"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000006d40)={{0x0, 0xfffffffffffffffd, 0xff, 0x0, 0xd2e8, 0x8b3f, 0x4, 0xf936, 0x2, 0x5, 0x6, 0xd69, 0x2, 0x7, 0x200}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000007d40)) 15:30:37 executing program 3: setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)="c65ef990d11decc0721c9d23adce23f2c5eaa9cb65ae5ae3c1b9bb150ef68b31fbd3b3e950361d1ff2c329b263451b4d8891d97bc330167d8cd12eb0883839947c1d9a3d71c912fff313a3f3e481b8ffac12036438e4c9cd290e3168453e8459ba7aeee2f99d868ea3baec243651802dfca38e9231379458c48a4d6e49e5f761ac3918733aa2b9af86bc637bd4fb2453177da61394a0f4e28a85d46f9fd8ca53340f948cae06c2520ca7b9e13628b6e0d05b08205dd3d87b4a19ecd4a1bb0e0ca067aa9281b8c6", 0xc7) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000100)=""/132, &(0x7f00000001c0)=0x84) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000200)=""/42, &(0x7f0000000240)=0x2a) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000280)='reno\x00', 0x5) mq_getsetattr(0xffffffffffffffff, &(0x7f00000002c0)={0x8, 0xfffffffffffff68f, 0x7, 0xcc0f}, &(0x7f0000000300)) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000340)={0xdb5, 0x101, 0x401, 0x4}) syz_open_dev$loop(&(0x7f0000000380), 0x7, 0x80) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000018c0), 0x105200, 0x0) 15:30:37 executing program 1: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"d4c0cadc7862c32b72c9fd760c05ca23", 0x0, 0x0, {0x0, 0x8}, {0x3ff}, 0x1000, [0x6, 0x9, 0x100000000, 0x35e3, 0x200, 0x2, 0xffffffffffff7fff, 0x10000, 0x8, 0x4, 0xff, 0x7049b48f, 0xfff, 0xffffffffffffff01, 0x7, 0x10000]}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3}, 0x1) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"87ccb543c14d08e63a7b0ba432b0a614", r0, r0, {0x7, 0xffffffff}, {0x5, 0x333e}, 0x8, [0x0, 0x4, 0x10001, 0x6, 0x800, 0x3, 0x7, 0x5d, 0x16b7, 0x9, 0x8d76, 0xfffffffffffffff9, 0x0, 0x4, 0x80, 0x5]}) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14, 0x80000) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@ipv4={'\x00', '\xff\xff', @empty}, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5, 0x0, 0x401, 0x100, 0x2, 0x40000040, r2}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@rand_addr=' \x01\x00', @mcast1, @loopback, 0x8, 0x3, 0x5, 0x0, 0x3, 0x0, r2}) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000003c0), 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000440)={{0xa, 0x4e20, 0x1ff, @local, 0xb07f}, {0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffffffff}, 0x7f, [0x8, 0xfffff801, 0x5, 0xef, 0x7fffffff, 0x581, 0x2, 0xc6b5]}, 0x5c) r4 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x4, &(0x7f00000004c0)=0x1, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000c80)={0x3b, 0xd, '\x00', [@enc_lim={0x4, 0x1, 0x7f}, @ra={0x5, 0x2, 0x7f}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x2, 0xc, 0x7f, 0x4, [0x2, 0x3, 0xffffffffffff896e, 0x3, 0xf17, 0x400]}}, @ra={0x5, 0x2, 0x1}, @jumbo={0xc2, 0x4, 0x4}, @enc_lim, @jumbo={0xc2, 0x4, 0x2d}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, 0x78) 15:30:37 executing program 5: ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000000)={0x0, 0x1ff, 0x8798}) mq_timedsend(0xffffffffffffffff, &(0x7f0000000040)="48f82bdea935cfba16267b6f7306e05a79674cd19b67f551", 0x18, 0x6, &(0x7f0000000080)={0x0, 0x989680}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) syz_io_uring_setup(0x20f, &(0x7f0000000100)={0x0, 0xc87d, 0x20, 0x2, 0x52, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) write$selinux_attr(r0, &(0x7f0000000200)='system_u:object_r:system_dbusd_var_lib_t:s0\x00', 0x2c) r1 = accept4$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000003c0), 0x1e5dc0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000480)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x80, r1, &(0x7f00000002c0)="8a409233828523bdcd6d501faa5e1460f31273cb0e90f906deeaa187a3e4d01b9eb516edcf920909c5f9366342524eccc49ff4ff3cf3dceb24521763b412c9fa06889edda15de61e84b61e520f8fbe63ea33743cb3fa7c13448db3cab1c1f282d058de3c599c4dee20a44fac6d2a98440c797b0776b4a9eb851fd7d6e6436e6a1db16e60f8ec9ddc062899df0f4d6e3d66de46670f14ad1ac6104fa708252a7462c043e34ecf5bcbc574dfee79561dc46553cc34", 0xb4, 0x0, 0x0, 0x0, r0}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2, 0x7, r2, &(0x7f0000000400)="ad71d632f4", 0x5, 0x9, 0x0, 0x2, r0}]) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000004c0)={0x0, 0x0, 0xffffffffffffffff, 0x4}) r3 = io_uring_setup(0x4c8e, &(0x7f0000000500)={0x0, 0x9d84, 0x1c, 0x2, 0x2fa, 0x0, r0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000580)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e20, 0x40, @empty, 0xd79b}}, 0x0, 0x0, 0x16, 0x0, "85d1191a58a2f27de4b44902caab4f42f235350c98f6489f2104d03d0cc56fb000dcef26f89f8ea46e2603754aeedb6f43b20d5c02bdf413d1f79ebdff0cb32090501722e56a785934df82838a5adefb"}, 0xd8) io_submit(0x0, 0x4, &(0x7f0000000cc0)=[&(0x7f0000000940)={0x0, 0x0, 0x0, 0x5, 0x20, r2, &(0x7f00000008c0)="0da7c1c104a5bdd590baa52dbb623f18626a0ce931f33251569345f0511a79fe9b84fe019489a72822f092ebc936812f4bca334d984b0afa9ab7443a32564ab3427a56d4be44a70e103ff44f", 0x4c, 0x7, 0x0, 0x1, r2}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x6, 0x5, r1, &(0x7f0000000980)="c842d606e4708da486090cc1f98a59bfee289f742c5ad27a9246a3a69d71e4848b7f8af18b97063dfe0dbdbc884213c18ec45e97688bc19a46dd25e99889a05915fc9e3c22d7a6994e7d44c89271d52bd753fba7d76b30c640148ec54523d25245ea6312b6cbd77d3356cb94597deb61090d95ca380560e49a883662f0762b1c70241b2229cc62e23f19313f3bad8760f5554c93bbfbcf44e04e9b83268e01b48aa796532f44fac2a81c5a1110697bb58e9775a51371760822cee53c70dca3411a41d57e5f79ec86933fd09b9f1778611bf1b028c4428c79c23cf6245aa2ad686e2793448e24265ba1f8b18421533a8cb243d7972ccd111a709e43", 0xfb, 0x4}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, &(0x7f0000000b00), 0x0, 0x100000001, 0x0, 0x1, r2}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x7, 0x3, r3, &(0x7f0000000b80)="0fb2829617d6993a6e18a9a36c5f43050533b08bc7362076e39b70219615a58b12d72664b5d794fbd2a176080c971cbbb0ce3a88e6b464201baaf13a6e51580988cfcdc7e39e4da737461f51cbac8d01cb8878d9452ca6b4ef0b6f3f105030e735dc59320c4991e0ae5af33c0dcd7092cd9f37ce3cc31bcb68f890b691423dbed08603901f801187de00cf68cbad3ff6ae9b0d574fd449081867438ba72b42721b2bcea6a318c7651b57095358324f5eb068e6efea560341535a3fea74ca1e7825ab68c3a290e3e8a85bca958f065713cc53cb7db904e3a7933a06b7c00fe7b1d632c2c313b496", 0xe7, 0x1, 0x0, 0x1, r0}]) 15:30:37 executing program 6: getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl0\x00', r1, 0x4, 0xbe, 0x3, 0x8, 0x2, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x1, 0x38bc, 0x3}}) r3 = accept$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) accept$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f00000002c0)={@mcast2, 0x60, r4}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x382c6ac8}}, './file0\x00'}) getsockopt$inet_tcp_buf(r5, 0x6, 0x1c, &(0x7f0000000340)=""/175, &(0x7f0000000400)=0xaf) accept$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) accept$packet(r0, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000500)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000580)={'ip6tnl0\x00', r2, 0x2f, 0xff, 0x6, 0x400, 0x12, @private1, @empty, 0x8000, 0x20, 0xfffffffc, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'ip6_vti0\x00', r6, 0x4, 0x40, 0x80, 0x1f, 0x53, @remote, @mcast2, 0x40, 0x7, 0x6}}) memfd_secret(0x80000) [ 183.757480] Bluetooth: hci1: command 0x0406 tx timeout [ 183.757516] Bluetooth: hci4: command 0x0406 tx timeout [ 183.758519] Bluetooth: hci2: command 0x0406 tx timeout [ 183.759310] Bluetooth: hci3: command 0x0406 tx timeout [ 183.760190] Bluetooth: hci6: command 0x0406 tx timeout [ 183.760909] Bluetooth: hci0: command 0x0406 tx timeout [ 183.761796] Bluetooth: hci7: command 0x0406 tx timeout [ 183.762516] Bluetooth: hci5: command 0x0406 tx timeout [ 187.853357] INFO: task rcu_gp:3 blocked for more than 143 seconds. [ 187.854401] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.855165] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.856660] task:rcu_gp state:I stack:30328 pid:3 ppid:2 flags:0x00004000 [ 187.857949] Call Trace: [ 187.858329] [ 187.859145] __schedule+0x893/0x2470 [ 187.859906] ? io_schedule_timeout+0x150/0x150 [ 187.860703] ? do_raw_spin_lock+0x121/0x260 [ 187.861330] ? rwlock_bug.part.0+0x90/0x90 [ 187.861923] schedule+0xda/0x1b0 [ 187.862427] rescuer_thread+0x851/0xdb0 [ 187.862980] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.863712] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.864419] ? lockdep_hardirqs_on+0x79/0x100 [ 187.865040] ? worker_thread+0x1260/0x1260 [ 187.865650] kthread+0x2ed/0x3a0 [ 187.866126] ? kthread_complete_and_exit+0x40/0x40 [ 187.866824] ret_from_fork+0x22/0x30 [ 187.867407] [ 187.867732] INFO: task rcu_par_gp:4 blocked for more than 143 seconds. [ 187.868606] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.869337] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.870374] task:rcu_par_gp state:I stack:30944 pid:4 ppid:2 flags:0x00004000 [ 187.871504] Call Trace: [ 187.871852] [ 187.872164] __schedule+0x893/0x2470 [ 187.872720] ? io_schedule_timeout+0x150/0x150 [ 187.873366] ? do_raw_spin_lock+0x121/0x260 [ 187.873957] ? rwlock_bug.part.0+0x90/0x90 [ 187.874574] schedule+0xda/0x1b0 [ 187.875072] rescuer_thread+0x851/0xdb0 [ 187.875652] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.876359] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.877036] ? lockdep_hardirqs_on+0x79/0x100 [ 187.877678] ? worker_thread+0x1260/0x1260 [ 187.878292] kthread+0x2ed/0x3a0 [ 187.878763] ? kthread_complete_and_exit+0x40/0x40 [ 187.879465] ret_from_fork+0x22/0x30 [ 187.879997] [ 187.880348] INFO: task slub_flushwq:5 blocked for more than 143 seconds. [ 187.881216] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.881941] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.882993] task:slub_flushwq state:I stack:30944 pid:5 ppid:2 flags:0x00004000 [ 187.884138] Call Trace: [ 187.884534] [ 187.884858] __schedule+0x893/0x2470 [ 187.885415] ? io_schedule_timeout+0x150/0x150 [ 187.886041] ? do_raw_spin_lock+0x121/0x260 [ 187.886658] ? rwlock_bug.part.0+0x90/0x90 [ 187.887287] schedule+0xda/0x1b0 [ 187.887763] rescuer_thread+0x851/0xdb0 [ 187.888349] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.889022] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.889731] ? lockdep_hardirqs_on+0x79/0x100 [ 187.890375] ? worker_thread+0x1260/0x1260 [ 187.890967] kthread+0x2ed/0x3a0 [ 187.891505] ? kthread_complete_and_exit+0x40/0x40 [ 187.892205] ret_from_fork+0x22/0x30 [ 187.892798] [ 187.893131] INFO: task netns:6 blocked for more than 143 seconds. [ 187.894008] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.894772] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.895865] task:netns state:I stack:30944 pid:6 ppid:2 flags:0x00004000 [ 187.897044] Call Trace: [ 187.897434] [ 187.897766] __schedule+0x893/0x2470 [ 187.898347] ? io_schedule_timeout+0x150/0x150 [ 187.898989] ? do_raw_spin_lock+0x121/0x260 [ 187.899621] ? rwlock_bug.part.0+0x90/0x90 [ 187.900232] schedule+0xda/0x1b0 [ 187.900740] rescuer_thread+0x851/0xdb0 [ 187.901319] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.901991] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.902697] ? lockdep_hardirqs_on+0x79/0x100 [ 187.903362] ? worker_thread+0x1260/0x1260 [ 187.903946] kthread+0x2ed/0x3a0 [ 187.904452] ? kthread_complete_and_exit+0x40/0x40 [ 187.905123] ret_from_fork+0x22/0x30 [ 187.905693] [ 187.906013] INFO: task kworker/0:0:7 blocked for more than 143 seconds. [ 187.906908] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.907643] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.908734] task:kworker/0:0 state:I stack:29592 pid:7 ppid:2 flags:0x00004000 [ 187.909914] Workqueue: 0x0 (ata_sff) [ 187.910494] Call Trace: [ 187.910859] [ 187.911201] __schedule+0x893/0x2470 [ 187.911777] ? io_schedule_timeout+0x150/0x150 [ 187.912480] schedule+0xda/0x1b0 [ 187.912981] worker_thread+0x15f/0x1260 [ 187.913609] ? process_one_work+0x16a0/0x16a0 [ 187.914250] kthread+0x2ed/0x3a0 [ 187.914767] ? kthread_complete_and_exit+0x40/0x40 [ 187.915535] ret_from_fork+0x22/0x30 [ 187.916090] [ 187.916452] INFO: task kworker/0:0H:8 blocked for more than 143 seconds. [ 187.917386] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.918111] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.919345] task:kworker/0:0H state:I stack:29464 pid:8 ppid:2 flags:0x00004000 [ 187.920507] Workqueue: 0x0 (kblockd) [ 187.921058] Call Trace: [ 187.921458] [ 187.921792] __schedule+0x893/0x2470 [ 187.922379] ? io_schedule_timeout+0x150/0x150 [ 187.923062] schedule+0xda/0x1b0 [ 187.923590] worker_thread+0x15f/0x1260 [ 187.924188] ? process_one_work+0x16a0/0x16a0 [ 187.924861] kthread+0x2ed/0x3a0 [ 187.925387] ? kthread_complete_and_exit+0x40/0x40 [ 187.926068] ret_from_fork+0x22/0x30 [ 187.926635] [ 187.926960] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds. [ 187.927877] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.928597] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.929620] task:mm_percpu_wq state:I stack:30944 pid:10 ppid:2 flags:0x00004000 [ 187.930746] Call Trace: [ 187.931105] [ 187.931454] __schedule+0x893/0x2470 [ 187.931984] ? io_schedule_timeout+0x150/0x150 [ 187.932636] ? do_raw_spin_lock+0x121/0x260 [ 187.933220] ? rwlock_bug.part.0+0x90/0x90 [ 187.933836] schedule+0xda/0x1b0 [ 187.934350] rescuer_thread+0x851/0xdb0 [ 187.934912] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.935654] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.936379] ? lockdep_hardirqs_on+0x79/0x100 [ 187.937007] ? worker_thread+0x1260/0x1260 [ 187.937628] kthread+0x2ed/0x3a0 [ 187.938131] ? kthread_complete_and_exit+0x40/0x40 [ 187.938868] ret_from_fork+0x22/0x30 [ 187.939472] [ 187.939799] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds. [ 187.940778] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.941524] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.942581] task:rcu_tasks_kthre state:I stack:29272 pid:11 ppid:2 flags:0x00004000 [ 187.943747] Call Trace: [ 187.944110] [ 187.944458] __schedule+0x893/0x2470 [ 187.944999] ? io_schedule_timeout+0x150/0x150 [ 187.945665] ? mark_held_locks+0x9e/0xe0 [ 187.946243] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.946971] schedule+0xda/0x1b0 [ 187.947493] rcu_tasks_one_gp+0x3db/0xc10 [ 187.948110] rcu_tasks_kthread+0x80/0xa0 [ 187.948703] ? rcu_tasks_postscan+0x10/0x10 [ 187.949338] kthread+0x2ed/0x3a0 [ 187.949821] ? kthread_complete_and_exit+0x40/0x40 [ 187.950530] ret_from_fork+0x22/0x30 [ 187.951082] [ 187.951458] INFO: task kworker/1:0:20 blocked for more than 143 seconds. [ 187.952396] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.953100] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.954156] task:kworker/1:0 state:I stack:29584 pid:20 ppid:2 flags:0x00004000 [ 187.955324] Workqueue: 0x0 (rcu_gp) [ 187.955857] Call Trace: [ 187.956212] [ 187.956577] __schedule+0x893/0x2470 [ 187.957116] ? io_schedule_timeout+0x150/0x150 [ 187.957810] schedule+0xda/0x1b0 [ 187.958341] worker_thread+0x15f/0x1260 [ 187.958912] ? process_one_work+0x16a0/0x16a0 [ 187.959585] kthread+0x2ed/0x3a0 [ 187.960065] ? kthread_complete_and_exit+0x40/0x40 [ 187.960772] ret_from_fork+0x22/0x30 [ 187.961354] [ 187.961681] INFO: task kworker/1:0H:21 blocked for more than 143 seconds. [ 187.962612] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.963377] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.964417] task:kworker/1:0H state:I stack:29760 pid:21 ppid:2 flags:0x00004000 [ 187.965554] Workqueue: 0x0 (events_highpri) [ 187.966158] Call Trace: [ 187.966545] [ 187.966870] __schedule+0x893/0x2470 [ 187.967442] ? io_schedule_timeout+0x150/0x150 [ 187.968085] schedule+0xda/0x1b0 [ 187.968604] worker_thread+0x15f/0x1260 [ 187.969185] ? process_one_work+0x16a0/0x16a0 [ 187.969851] kthread+0x2ed/0x3a0 [ 187.970374] ? kthread_complete_and_exit+0x40/0x40 [ 187.971074] ret_from_fork+0x22/0x30 [ 187.971663] [ 187.972049] [ 187.972049] Showing all locks held in the system: [ 187.972928] 1 lock held by rcu_tasks_kthre/11: [ 187.973568] #0: ffffffff85406850 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10 [ 187.974908] 1 lock held by khungtaskd/26: [ 187.975512] #0: ffffffff85407320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 187.976775] 1 lock held by in:imklog/188: [ 187.977369] 2 locks held by syz-executor/4226: [ 187.977981] [ 187.978216] ============================================= [ 187.978216] 15:30:52 executing program 4: r0 = socket(0x28, 0x800, 0x68770a22) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000080)={0x3f, {{0xa, 0x4e20, 0x1c9e, @remote, 0x7}}}, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000140)={'raw\x00', 0x2, [{}, {}]}, 0x48) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x90001, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000200)={'mangle\x00', 0x3, [{}, {}, {}]}, 0x58) r3 = socket(0x22, 0x5, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000280)=0x4, 0x4) r4 = socket(0x22, 0x2, 0xb0) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f00000002c0)={0x1}, 0x4) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/custom1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000480)={0x1c, 0x0, &(0x7f0000000340)=[@clear_death={0x400c630f, 0x2}, @exit_looper, @increfs={0x40046304, 0x3}], 0xc8, 0x0, &(0x7f0000000380)="945a2582e97415526fcffb6e6ffc35829949b698c3ab57af9a20f64c973221b872f70463e96f9459c9dc1a30c8fe2fcedd4c36b65debe6c3eaccc3b81ff761ff0b1fd2ebecc5ff0af654bcfcc2cf0e00025660a75887f400e42c45b0439f8d01542f5794e90ae9dde422c38e6b61b79ffe7c8a7b1be9a30f902d3fa6bb4907a4668dce3fd1165d0b5dc275f5f01f470c7c6a746b18dddc84bf4b89b00ddb68d4e9fe77f60f17a7f1422d8feb01ca02b59447c5bce41060d28dae608fad37fbd9942b955be74daca8"}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000005c0)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/156, 0x9c, 0x1, &(0x7f0000000580)=""/35, 0x23}, &(0x7f0000000600)=0x40) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000640)={0x80000001, {{0xa, 0x4e21, 0x10000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x200}}}, 0x88) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index=0x4, 0x0, 0x0, 0x6, 0x0, 0x0, {0x0, 0x0, r4}}, 0x80) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000880)={@local, 0x1c}) 15:30:52 executing program 6: getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl0\x00', r1, 0x4, 0xbe, 0x3, 0x8, 0x2, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x1, 0x38bc, 0x3}}) r3 = accept$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) accept$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f00000002c0)={@mcast2, 0x60, r4}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x382c6ac8}}, './file0\x00'}) getsockopt$inet_tcp_buf(r5, 0x6, 0x1c, &(0x7f0000000340)=""/175, &(0x7f0000000400)=0xaf) accept$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) accept$packet(r0, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000500)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000580)={'ip6tnl0\x00', r2, 0x2f, 0xff, 0x6, 0x400, 0x12, @private1, @empty, 0x8000, 0x20, 0xfffffffc, 0x1}}) memfd_secret(0x80000) 15:30:52 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x800, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000080), 0xd1dc, 0x28000) setsockopt$inet6_tcp_int(r1, 0x6, 0x3, &(0x7f00000000c0)=0x3, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100), 0x4) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000140)={0x41, {{0xa, 0x4e22, 0x40, @mcast1, 0x4}}, 0x0, 0x7, [{{0xa, 0x4e21, 0x8000, @private0, 0x7fff}}, {{0xa, 0x4e24, 0x2, @remote, 0x800}}, {{0xa, 0x4e21, 0x0, @mcast2, 0x7}}, {{0xa, 0x4e23, 0x6, @local, 0x20}}, {{0xa, 0x4e20, 0xef8, @loopback, 0x1}}, {{0xa, 0x4e20, 0x5, @local, 0x1}}, {{0xa, 0x4e24, 0x8, @mcast1, 0xda}}]}, 0x410) r2 = syz_open_dev$mouse(&(0x7f0000000580), 0x1000, 0x400) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f00000005c0)) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000600), 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000640)={0xfffffffffffffffb, [], 0x81, "73777614b01e26"}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000001640)={{0x0, 0x9, 0x2, 0xff, 0x3, 0x2, 0x3, 0x1ff, 0x3f, 0x1f, 0x5, 0x8, 0x3, 0x81, 0xa1}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000002640)={{0x0, 0x3, 0x3ff, 0x7fff, 0x6, 0x8, 0x80, 0x7, 0x9, 0x4d, 0x5, 0x4, 0x2, 0x9, 0x100000000}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000026c0)) 15:30:52 executing program 3: setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)="c65ef990d11decc0721c9d23adce23f2c5eaa9cb65ae5ae3c1b9bb150ef68b31fbd3b3e950361d1ff2c329b263451b4d8891d97bc330167d8cd12eb0883839947c1d9a3d71c912fff313a3f3e481b8ffac12036438e4c9cd290e3168453e8459ba7aeee2f99d868ea3baec243651802dfca38e9231379458c48a4d6e49e5f761ac3918733aa2b9af86bc637bd4fb2453177da61394a0f4e28a85d46f9fd8ca53340f948cae06c2520ca7b9e13628b6e0d05b08205dd3d87b4a19ecd4a1bb0e0ca067aa9281b8c6", 0xc7) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000100)=""/132, &(0x7f00000001c0)=0x84) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000200)=""/42, &(0x7f0000000240)=0x2a) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000280)='reno\x00', 0x5) mq_getsetattr(0xffffffffffffffff, &(0x7f00000002c0)={0x8, 0xfffffffffffff68f, 0x7, 0xcc0f}, &(0x7f0000000300)) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000340)={0xdb5, 0x101, 0x401, 0x4}) syz_open_dev$loop(&(0x7f0000000380), 0x7, 0x80) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000018c0), 0x105200, 0x0) 15:30:52 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0xf8, 0x0, &(0x7f0000000380)=[@enter_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0x7, 0x1, 0x7}, @fd, @flat=@handle={0x73682a85, 0xb}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}}, @register_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/66, 0x42, 0x1, 0x32}, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x34}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x40}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x60, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/170, 0xaa, 0x1, 0x22}, @flat=@weak_binder={0x77622a85, 0xa, 0x2}, @fda={0x66646185, 0xa, 0x4, 0x2a}}, &(0x7f0000000340)={0x0, 0x28, 0x40}}}, @dead_binder_done], 0xfb, 0x0, &(0x7f0000000480)="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"}) io_submit(0x0, 0x0, &(0x7f00000005c0)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x10000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000640)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000840)={0x20, [], 0x98, "e333e58853c5fa"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001840)) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001a40)={{0x0, 0xa3, 0x190b, 0x4, 0xdc3, 0x7, 0x9, 0x9f, 0xfffffffb, 0x200, 0x3f, 0x1, 0xffff, 0x400, 0x10000000}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001ac0)={{0x0, 0x9, 0x8, 0xffffffff, 0x3, 0x1, 0x1, 0x9, 0xf946, 0x7, 0x4, 0xd48, 0x3, 0x7fffffff, 0xfffffffffffff001}, 0x8, [0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001b40)) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001d40)={{0x0, 0x40, 0x7fff, 0x2, 0x101, 0x4, 0x7fff, 0x1, 0xfffffe00, 0x35, 0x3ff, 0x1ff, 0x3, 0xca, 0x1}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002d40)={0x1000, [], 0x3f, "4dd071380578dc"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000003d40)={{0x0, 0x6, 0x0, 0x7, 0x5, 0xfffffffffffffffc, 0x7, 0x4, 0xff, 0x20, 0x1ff, 0x4000, 0x2ae, 0x5, 0xff}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000004d40)={0x7fffffff, [], 0x3f, "ce40b9754ac8e1"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000005d40)={0x1ff, [], 0x3, "957c6398ec9700"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000006d40)={{0x0, 0xfffffffffffffffd, 0xff, 0x0, 0xd2e8, 0x8b3f, 0x4, 0xf936, 0x2, 0x5, 0x6, 0xd69, 0x2, 0x7, 0x200}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000007d40)) 15:30:52 executing program 1: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"d4c0cadc7862c32b72c9fd760c05ca23", 0x0, 0x0, {0x0, 0x8}, {0x3ff}, 0x1000, [0x6, 0x9, 0x100000000, 0x35e3, 0x200, 0x2, 0xffffffffffff7fff, 0x10000, 0x8, 0x4, 0xff, 0x7049b48f, 0xfff, 0xffffffffffffff01, 0x7, 0x10000]}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3}, 0x1) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"87ccb543c14d08e63a7b0ba432b0a614", r0, r0, {0x7, 0xffffffff}, {0x5, 0x333e}, 0x8, [0x0, 0x4, 0x10001, 0x6, 0x800, 0x3, 0x7, 0x5d, 0x16b7, 0x9, 0x8d76, 0xfffffffffffffff9, 0x0, 0x4, 0x80, 0x5]}) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14, 0x80000) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@ipv4={'\x00', '\xff\xff', @empty}, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5, 0x0, 0x401, 0x100, 0x2, 0x40000040, r2}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@rand_addr=' \x01\x00', @mcast1, @loopback, 0x8, 0x3, 0x5, 0x0, 0x3, 0x0, r2}) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000003c0), 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000440)={{0xa, 0x4e20, 0x1ff, @local, 0xb07f}, {0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffffffff}, 0x7f, [0x8, 0xfffff801, 0x5, 0xef, 0x7fffffff, 0x581, 0x2, 0xc6b5]}, 0x5c) r4 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000c80)={0x3b, 0xd, '\x00', [@enc_lim={0x4, 0x1, 0x7f}, @ra={0x5, 0x2, 0x7f}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x2, 0xc, 0x7f, 0x4, [0x2, 0x3, 0xffffffffffff896e, 0x3, 0xf17, 0x400]}}, @ra={0x5, 0x2, 0x1}, @jumbo={0xc2, 0x4, 0x4}, @enc_lim, @jumbo={0xc2, 0x4, 0x2d}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, 0x78) 15:30:52 executing program 7: setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)={0x5e, 0x2, 0x1, 0x3, 0x0, [@dev={0xfe, 0x80, '\x00', 0x10}]}, 0x18) r0 = syz_io_uring_complete(0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14, 0x80800) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000000c0)={@local, r1}, 0x14) getsockname$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000140)=0x1c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4) r4 = socket(0x21, 0x4, 0x401) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f00000002c0)={0x1, {{0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}}}, 0x88) setsockopt$inet6_buf(r4, 0x29, 0xdb, &(0x7f0000000380)="e0b164be7942560e0ef6298eb798f9af0f7faad8459c120e15db44d6355d096b94333aad7459675c54de1aaaf09bf6ab0a8955d07cf9ad8d84a32817ac2d75aec9959d9a7714c633a1ace7fe3079c4e413dd7d8e4adeaa2a96e5b0ef522f", 0x5e) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000500)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000540)={@private2={0xfc, 0x2, '\x00', 0x1}, r5}, 0x14) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8}, 0x20002800) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000006c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x29, 0x2d, &(0x7f0000000800)={0x0, {{0xa, 0x4e22, 0x80, @remote, 0x54a58250}}}, 0x88) 15:30:52 executing program 5: ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000000)={0x0, 0x1ff, 0x8798}) mq_timedsend(0xffffffffffffffff, &(0x7f0000000040)="48f82bdea935cfba16267b6f7306e05a79674cd19b67f551", 0x18, 0x6, &(0x7f0000000080)={0x0, 0x989680}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) syz_io_uring_setup(0x20f, &(0x7f0000000100)={0x0, 0xc87d, 0x20, 0x2, 0x52, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) write$selinux_attr(r0, &(0x7f0000000200)='system_u:object_r:system_dbusd_var_lib_t:s0\x00', 0x2c) r1 = accept4$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000003c0), 0x1e5dc0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000480)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x80, r1, &(0x7f00000002c0)="8a409233828523bdcd6d501faa5e1460f31273cb0e90f906deeaa187a3e4d01b9eb516edcf920909c5f9366342524eccc49ff4ff3cf3dceb24521763b412c9fa06889edda15de61e84b61e520f8fbe63ea33743cb3fa7c13448db3cab1c1f282d058de3c599c4dee20a44fac6d2a98440c797b0776b4a9eb851fd7d6e6436e6a1db16e60f8ec9ddc062899df0f4d6e3d66de46670f14ad1ac6104fa708252a7462c043e34ecf5bcbc574dfee79561dc46553cc34", 0xb4, 0x0, 0x0, 0x0, r0}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2, 0x7, r2, &(0x7f0000000400)="ad71d632f4", 0x5, 0x9, 0x0, 0x2, r0}]) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000004c0)={0x0, 0x0, 0xffffffffffffffff, 0x4}) r3 = io_uring_setup(0x4c8e, &(0x7f0000000500)={0x0, 0x9d84, 0x1c, 0x2, 0x2fa, 0x0, r0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000580)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x7, &(0x7f0000000880)=0x0) io_submit(r6, 0x4, &(0x7f0000000cc0)=[&(0x7f0000000940)={0x0, 0x0, 0x0, 0x5, 0x20, r2, &(0x7f00000008c0)="0da7c1c104a5bdd590baa52dbb623f18626a0ce931f33251569345f0511a79fe9b84fe019489a72822f092ebc936812f4bca334d984b0afa9ab7443a32564ab3427a56d4be44a70e103ff44f", 0x4c, 0x7, 0x0, 0x1, r2}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x6, 0x5, r1, &(0x7f0000000980)="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", 0xfb, 0x4}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, &(0x7f0000000b00), 0x0, 0x100000001, 0x0, 0x1, r2}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x7, 0x3, r3, &(0x7f0000000b80)="0fb2829617d6993a6e18a9a36c5f43050533b08bc7362076e39b70219615a58b12d72664b5d794fbd2a176080c971cbbb0ce3a88e6b464201baaf13a6e51580988cfcdc7e39e4da737461f51cbac8d01cb8878d9452ca6b4ef0b6f3f105030e735dc59320c4991e0ae5af33c0dcd7092cd9f37ce3cc31bcb68f890b691423dbed08603901f801187de00cf68cbad3ff6ae9b0d574fd449081867438ba72b42721b2bcea6a318c7651b57095358324f5eb068e6efea560341535a3fea74ca1e7825ab68c3a290e3e8a85bca958f065713cc53cb7db904e3a7933a06b7c00fe7b1d632c2c313b496", 0xe7, 0x1, 0x0, 0x1, r0}]) 15:30:52 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x800, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000080), 0xd1dc, 0x28000) setsockopt$inet6_tcp_int(r1, 0x6, 0x3, &(0x7f00000000c0)=0x3, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100), 0x4) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000140)={0x41, {{0xa, 0x4e22, 0x40, @mcast1, 0x4}}, 0x0, 0x7, [{{0xa, 0x4e21, 0x8000, @private0, 0x7fff}}, {{0xa, 0x4e24, 0x2, @remote, 0x800}}, {{0xa, 0x4e21, 0x0, @mcast2, 0x7}}, {{0xa, 0x4e23, 0x6, @local, 0x20}}, {{0xa, 0x4e20, 0xef8, @loopback, 0x1}}, {{0xa, 0x4e20, 0x5, @local, 0x1}}, {{0xa, 0x4e24, 0x8, @mcast1, 0xda}}]}, 0x410) r2 = syz_open_dev$mouse(&(0x7f0000000580), 0x1000, 0x400) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f00000005c0)) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000600), 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000640)={0xfffffffffffffffb, [], 0x81, "73777614b01e26"}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000001640)={{0x0, 0x9, 0x2, 0xff, 0x3, 0x2, 0x3, 0x1ff, 0x3f, 0x1f, 0x5, 0x8, 0x3, 0x81, 0xa1}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000002640)={{0x0, 0x3, 0x3ff, 0x7fff, 0x6, 0x8, 0x80, 0x7, 0x9, 0x4d, 0x5, 0x4, 0x2, 0x9, 0x100000000}, 0x10, [0x0, 0x0]}) 15:30:52 executing program 6: getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl0\x00', r1, 0x4, 0xbe, 0x3, 0x8, 0x2, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x1, 0x38bc, 0x3}}) r2 = accept$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) accept$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f00000002c0)={@mcast2, 0x60, r3}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0x382c6ac8}}, './file0\x00'}) getsockopt$inet_tcp_buf(r4, 0x6, 0x1c, &(0x7f0000000340)=""/175, &(0x7f0000000400)=0xaf) accept$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) accept$packet(r0, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000500)=0x14) memfd_secret(0x80000) 15:30:52 executing program 1: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"d4c0cadc7862c32b72c9fd760c05ca23", 0x0, 0x0, {0x0, 0x8}, {0x3ff}, 0x1000, [0x6, 0x9, 0x100000000, 0x35e3, 0x200, 0x2, 0xffffffffffff7fff, 0x10000, 0x8, 0x4, 0xff, 0x7049b48f, 0xfff, 0xffffffffffffff01, 0x7, 0x10000]}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3}, 0x1) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"87ccb543c14d08e63a7b0ba432b0a614", r0, r0, {0x7, 0xffffffff}, {0x5, 0x333e}, 0x8, [0x0, 0x4, 0x10001, 0x6, 0x800, 0x3, 0x7, 0x5d, 0x16b7, 0x9, 0x8d76, 0xfffffffffffffff9, 0x0, 0x4, 0x80, 0x5]}) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14, 0x80000) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@ipv4={'\x00', '\xff\xff', @empty}, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5, 0x0, 0x401, 0x100, 0x2, 0x40000040, r2}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@rand_addr=' \x01\x00', @mcast1, @loopback, 0x8, 0x3, 0x5, 0x0, 0x3, 0x0, r2}) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000003c0), 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000440)={{0xa, 0x4e20, 0x1ff, @local, 0xb07f}, {0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffffffff}, 0x7f, [0x8, 0xfffff801, 0x5, 0xef, 0x7fffffff, 0x581, 0x2, 0xc6b5]}, 0x5c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000c80)={0x3b, 0xd, '\x00', [@enc_lim={0x4, 0x1, 0x7f}, @ra={0x5, 0x2, 0x7f}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x2, 0xc, 0x7f, 0x4, [0x2, 0x3, 0xffffffffffff896e, 0x3, 0xf17, 0x400]}}, @ra={0x5, 0x2, 0x1}, @jumbo={0xc2, 0x4, 0x4}, @enc_lim, @jumbo={0xc2, 0x4, 0x2d}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, 0x78) 15:30:52 executing program 3: setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)="c65ef990d11decc0721c9d23adce23f2c5eaa9cb65ae5ae3c1b9bb150ef68b31fbd3b3e950361d1ff2c329b263451b4d8891d97bc330167d8cd12eb0883839947c1d9a3d71c912fff313a3f3e481b8ffac12036438e4c9cd290e3168453e8459ba7aeee2f99d868ea3baec243651802dfca38e9231379458c48a4d6e49e5f761ac3918733aa2b9af86bc637bd4fb2453177da61394a0f4e28a85d46f9fd8ca53340f948cae06c2520ca7b9e13628b6e0d05b08205dd3d87b4a19ecd4a1bb0e0ca067aa9281b8c6", 0xc7) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000100)=""/132, &(0x7f00000001c0)=0x84) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000200)=""/42, &(0x7f0000000240)=0x2a) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000280)='reno\x00', 0x5) mq_getsetattr(0xffffffffffffffff, &(0x7f00000002c0)={0x8, 0xfffffffffffff68f, 0x7, 0xcc0f}, &(0x7f0000000300)) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000340)={0xdb5, 0x101, 0x401, 0x4}) syz_open_dev$loop(&(0x7f0000000380), 0x7, 0x80) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000018c0), 0x105200, 0x0) 15:30:52 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0xf8, 0x0, &(0x7f0000000380)=[@enter_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0x7, 0x1, 0x7}, @fd, @flat=@handle={0x73682a85, 0xb}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}}, @register_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/66, 0x42, 0x1, 0x32}, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x34}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x40}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x60, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/170, 0xaa, 0x1, 0x22}, @flat=@weak_binder={0x77622a85, 0xa, 0x2}, @fda={0x66646185, 0xa, 0x4, 0x2a}}, &(0x7f0000000340)={0x0, 0x28, 0x40}}}, @dead_binder_done], 0xfb, 0x0, &(0x7f0000000480)="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"}) io_submit(0x0, 0x0, &(0x7f00000005c0)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x10000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000640)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000840)={0x20, [], 0x98, "e333e58853c5fa"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001840)) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001a40)={{0x0, 0xa3, 0x190b, 0x4, 0xdc3, 0x7, 0x9, 0x9f, 0xfffffffb, 0x200, 0x3f, 0x1, 0xffff, 0x400, 0x10000000}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001ac0)={{0x0, 0x9, 0x8, 0xffffffff, 0x3, 0x1, 0x1, 0x9, 0xf946, 0x7, 0x4, 0xd48, 0x3, 0x7fffffff, 0xfffffffffffff001}, 0x8, [0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001b40)) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001d40)={{0x0, 0x40, 0x7fff, 0x2, 0x101, 0x4, 0x7fff, 0x1, 0xfffffe00, 0x35, 0x3ff, 0x1ff, 0x3, 0xca, 0x1}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002d40)={0x1000, [], 0x3f, "4dd071380578dc"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000003d40)={{0x0, 0x6, 0x0, 0x7, 0x5, 0xfffffffffffffffc, 0x7, 0x4, 0xff, 0x20, 0x1ff, 0x4000, 0x2ae, 0x5, 0xff}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000004d40)={0x7fffffff, [], 0x3f, "ce40b9754ac8e1"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000005d40)={0x1ff, [], 0x3, "957c6398ec9700"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000006d40)={{0x0, 0xfffffffffffffffd, 0xff, 0x0, 0xd2e8, 0x8b3f, 0x4, 0xf936, 0x2, 0x5, 0x6, 0xd69, 0x2, 0x7, 0x200}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000007d40)) 15:30:52 executing program 5: ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000000)={0x0, 0x1ff, 0x8798}) mq_timedsend(0xffffffffffffffff, &(0x7f0000000040)="48f82bdea935cfba16267b6f7306e05a79674cd19b67f551", 0x18, 0x6, &(0x7f0000000080)={0x0, 0x989680}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) syz_io_uring_setup(0x20f, &(0x7f0000000100)={0x0, 0xc87d, 0x20, 0x2, 0x52, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) write$selinux_attr(r0, &(0x7f0000000200)='system_u:object_r:system_dbusd_var_lib_t:s0\x00', 0x2c) r1 = accept4$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000003c0), 0x1e5dc0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000480)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x80, r1, &(0x7f00000002c0)="8a409233828523bdcd6d501faa5e1460f31273cb0e90f906deeaa187a3e4d01b9eb516edcf920909c5f9366342524eccc49ff4ff3cf3dceb24521763b412c9fa06889edda15de61e84b61e520f8fbe63ea33743cb3fa7c13448db3cab1c1f282d058de3c599c4dee20a44fac6d2a98440c797b0776b4a9eb851fd7d6e6436e6a1db16e60f8ec9ddc062899df0f4d6e3d66de46670f14ad1ac6104fa708252a7462c043e34ecf5bcbc574dfee79561dc46553cc34", 0xb4, 0x0, 0x0, 0x0, r0}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2, 0x7, r2, &(0x7f0000000400)="ad71d632f4", 0x5, 0x9, 0x0, 0x2, r0}]) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000004c0)={0x0, 0x0, 0xffffffffffffffff, 0x4}) r3 = io_uring_setup(0x4c8e, &(0x7f0000000500)={0x0, 0x9d84, 0x1c, 0x2, 0x2fa, 0x0, r0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000580)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) io_setup(0x7, &(0x7f0000000880)=0x0) io_submit(r6, 0x4, &(0x7f0000000cc0)=[&(0x7f0000000940)={0x0, 0x0, 0x0, 0x5, 0x20, r2, &(0x7f00000008c0)="0da7c1c104a5bdd590baa52dbb623f18626a0ce931f33251569345f0511a79fe9b84fe019489a72822f092ebc936812f4bca334d984b0afa9ab7443a32564ab3427a56d4be44a70e103ff44f", 0x4c, 0x7, 0x0, 0x1, r2}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x6, 0x5, r1, &(0x7f0000000980)="c842d606e4708da486090cc1f98a59bfee289f742c5ad27a9246a3a69d71e4848b7f8af18b97063dfe0dbdbc884213c18ec45e97688bc19a46dd25e99889a05915fc9e3c22d7a6994e7d44c89271d52bd753fba7d76b30c640148ec54523d25245ea6312b6cbd77d3356cb94597deb61090d95ca380560e49a883662f0762b1c70241b2229cc62e23f19313f3bad8760f5554c93bbfbcf44e04e9b83268e01b48aa796532f44fac2a81c5a1110697bb58e9775a51371760822cee53c70dca3411a41d57e5f79ec86933fd09b9f1778611bf1b028c4428c79c23cf6245aa2ad686e2793448e24265ba1f8b18421533a8cb243d7972ccd111a709e43", 0xfb, 0x4}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, &(0x7f0000000b00), 0x0, 0x100000001, 0x0, 0x1, r2}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x7, 0x3, r3, &(0x7f0000000b80)="0fb2829617d6993a6e18a9a36c5f43050533b08bc7362076e39b70219615a58b12d72664b5d794fbd2a176080c971cbbb0ce3a88e6b464201baaf13a6e51580988cfcdc7e39e4da737461f51cbac8d01cb8878d9452ca6b4ef0b6f3f105030e735dc59320c4991e0ae5af33c0dcd7092cd9f37ce3cc31bcb68f890b691423dbed08603901f801187de00cf68cbad3ff6ae9b0d574fd449081867438ba72b42721b2bcea6a318c7651b57095358324f5eb068e6efea560341535a3fea74ca1e7825ab68c3a290e3e8a85bca958f065713cc53cb7db904e3a7933a06b7c00fe7b1d632c2c313b496", 0xe7, 0x1, 0x0, 0x1, r0}]) 15:30:52 executing program 1: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"d4c0cadc7862c32b72c9fd760c05ca23", 0x0, 0x0, {0x0, 0x8}, {0x3ff}, 0x1000, [0x6, 0x9, 0x100000000, 0x35e3, 0x200, 0x2, 0xffffffffffff7fff, 0x10000, 0x8, 0x4, 0xff, 0x7049b48f, 0xfff, 0xffffffffffffff01, 0x7, 0x10000]}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3}, 0x1) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"87ccb543c14d08e63a7b0ba432b0a614", r0, r0, {0x7, 0xffffffff}, {0x5, 0x333e}, 0x8, [0x0, 0x4, 0x10001, 0x6, 0x800, 0x3, 0x7, 0x5d, 0x16b7, 0x9, 0x8d76, 0xfffffffffffffff9, 0x0, 0x4, 0x80, 0x5]}) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14, 0x80000) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@ipv4={'\x00', '\xff\xff', @empty}, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5, 0x0, 0x401, 0x100, 0x2, 0x40000040, r2}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@rand_addr=' \x01\x00', @mcast1, @loopback, 0x8, 0x3, 0x5, 0x0, 0x3, 0x0, r2}) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000003c0), 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000440)={{0xa, 0x4e20, 0x1ff, @local, 0xb07f}, {0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffffffff}, 0x7f, [0x8, 0xfffff801, 0x5, 0xef, 0x7fffffff, 0x581, 0x2, 0xc6b5]}, 0x5c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000c80)={0x3b, 0xd, '\x00', [@enc_lim={0x4, 0x1, 0x7f}, @ra={0x5, 0x2, 0x7f}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x2, 0xc, 0x7f, 0x4, [0x2, 0x3, 0xffffffffffff896e, 0x3, 0xf17, 0x400]}}, @ra={0x5, 0x2, 0x1}, @jumbo={0xc2, 0x4, 0x4}, @enc_lim, @jumbo={0xc2, 0x4, 0x2d}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, 0x78) 15:30:52 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x800, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000080), 0xd1dc, 0x28000) setsockopt$inet6_tcp_int(r1, 0x6, 0x3, &(0x7f00000000c0)=0x3, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100), 0x4) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000140)={0x41, {{0xa, 0x4e22, 0x40, @mcast1, 0x4}}, 0x0, 0x7, [{{0xa, 0x4e21, 0x8000, @private0, 0x7fff}}, {{0xa, 0x4e24, 0x2, @remote, 0x800}}, {{0xa, 0x4e21, 0x0, @mcast2, 0x7}}, {{0xa, 0x4e23, 0x6, @local, 0x20}}, {{0xa, 0x4e20, 0xef8, @loopback, 0x1}}, {{0xa, 0x4e20, 0x5, @local, 0x1}}, {{0xa, 0x4e24, 0x8, @mcast1, 0xda}}]}, 0x410) r2 = syz_open_dev$mouse(&(0x7f0000000580), 0x1000, 0x400) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f00000005c0)) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000600), 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000640)={0xfffffffffffffffb, [], 0x81, "73777614b01e26"}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000001640)={{0x0, 0x9, 0x2, 0xff, 0x3, 0x2, 0x3, 0x1ff, 0x3f, 0x1f, 0x5, 0x8, 0x3, 0x81, 0xa1}}) 15:30:52 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0xf8, 0x0, &(0x7f0000000380)=[@enter_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0x7, 0x1, 0x7}, @fd, @flat=@handle={0x73682a85, 0xb}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}}, @register_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/66, 0x42, 0x1, 0x32}, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @fda={0x66646185, 0x4, 0x1, 0x34}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x40}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x60, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/170, 0xaa, 0x1, 0x22}, @flat=@weak_binder={0x77622a85, 0xa, 0x2}, @fda={0x66646185, 0xa, 0x4, 0x2a}}, &(0x7f0000000340)={0x0, 0x28, 0x40}}}, @dead_binder_done], 0xfb, 0x0, &(0x7f0000000480)="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"}) io_submit(0x0, 0x0, &(0x7f00000005c0)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x10000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000640)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000840)={0x20, [], 0x98, "e333e58853c5fa"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001840)) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001a40)={{0x0, 0xa3, 0x190b, 0x4, 0xdc3, 0x7, 0x9, 0x9f, 0xfffffffb, 0x200, 0x3f, 0x1, 0xffff, 0x400, 0x10000000}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001ac0)={{0x0, 0x9, 0x8, 0xffffffff, 0x3, 0x1, 0x1, 0x9, 0xf946, 0x7, 0x4, 0xd48, 0x3, 0x7fffffff, 0xfffffffffffff001}, 0x8, [0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001b40)) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001d40)={{0x0, 0x40, 0x7fff, 0x2, 0x101, 0x4, 0x7fff, 0x1, 0xfffffe00, 0x35, 0x3ff, 0x1ff, 0x3, 0xca, 0x1}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002d40)={0x1000, [], 0x3f, "4dd071380578dc"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000003d40)={{0x0, 0x6, 0x0, 0x7, 0x5, 0xfffffffffffffffc, 0x7, 0x4, 0xff, 0x20, 0x1ff, 0x4000, 0x2ae, 0x5, 0xff}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000004d40)={0x7fffffff, [], 0x3f, "ce40b9754ac8e1"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000005d40)={0x1ff, [], 0x3, "957c6398ec9700"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000006d40)={{0x0, 0xfffffffffffffffd, 0xff, 0x0, 0xd2e8, 0x8b3f, 0x4, 0xf936, 0x2, 0x5, 0x6, 0xd69, 0x2, 0x7, 0x200}}) 15:30:52 executing program 4: r0 = socket(0x28, 0x800, 0x68770a22) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000080)={0x3f, {{0xa, 0x4e20, 0x1c9e, @remote, 0x7}}}, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000140)={'raw\x00', 0x2, [{}, {}]}, 0x48) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x90001, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000200)={'mangle\x00', 0x3, [{}, {}, {}]}, 0x58) r3 = socket(0x22, 0x5, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000280)=0x4, 0x4) r4 = socket(0x22, 0x2, 0xb0) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f00000002c0)={0x1}, 0x4) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/custom1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000480)={0x1c, 0x0, &(0x7f0000000340)=[@clear_death={0x400c630f, 0x2}, @exit_looper, @increfs={0x40046304, 0x3}], 0xc8, 0x0, &(0x7f0000000380)="945a2582e97415526fcffb6e6ffc35829949b698c3ab57af9a20f64c973221b872f70463e96f9459c9dc1a30c8fe2fcedd4c36b65debe6c3eaccc3b81ff761ff0b1fd2ebecc5ff0af654bcfcc2cf0e00025660a75887f400e42c45b0439f8d01542f5794e90ae9dde422c38e6b61b79ffe7c8a7b1be9a30f902d3fa6bb4907a4668dce3fd1165d0b5dc275f5f01f470c7c6a746b18dddc84bf4b89b00ddb68d4e9fe77f60f17a7f1422d8feb01ca02b59447c5bce41060d28dae608fad37fbd9942b955be74daca8"}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000005c0)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/156, 0x9c, 0x1, &(0x7f0000000580)=""/35, 0x23}, &(0x7f0000000600)=0x40) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000640)={0x80000001, {{0xa, 0x4e21, 0x10000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x200}}}, 0x88) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index=0x4, 0x0, 0x0, 0x6, 0x0, 0x0, {0x0, 0x0, r4}}, 0x80) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000880)={@local, 0x1c}) 15:30:52 executing program 6: getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl0\x00', r1, 0x4, 0xbe, 0x3, 0x8, 0x2, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x1, 0x38bc, 0x3}}) r2 = accept$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c) accept$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f00000002c0)={@mcast2, 0x60, r3}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0x382c6ac8}}, './file0\x00'}) getsockopt$inet_tcp_buf(r4, 0x6, 0x1c, &(0x7f0000000340)=""/175, &(0x7f0000000400)=0xaf) accept$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) memfd_secret(0x80000) 15:30:52 executing program 3: setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)="c65ef990d11decc0721c9d23adce23f2c5eaa9cb65ae5ae3c1b9bb150ef68b31fbd3b3e950361d1ff2c329b263451b4d8891d97bc330167d8cd12eb0883839947c1d9a3d71c912fff313a3f3e481b8ffac12036438e4c9cd290e3168453e8459ba7aeee2f99d868ea3baec243651802dfca38e9231379458c48a4d6e49e5f761ac3918733aa2b9af86bc637bd4fb2453177da61394a0f4e28a85d46f9fd8ca53340f948cae06c2520ca7b9e13628b6e0d05b08205dd3d87b4a19ecd4a1bb0e0ca067aa9281b8c6", 0xc7) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000100)=""/132, &(0x7f00000001c0)=0x84) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000200)=""/42, &(0x7f0000000240)=0x2a) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000280)='reno\x00', 0x5) mq_getsetattr(0xffffffffffffffff, &(0x7f00000002c0)={0x8, 0xfffffffffffff68f, 0x7, 0xcc0f}, &(0x7f0000000300)) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000340)={0xdb5, 0x101, 0x401, 0x4}) io_cancel(0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffff, &(0x7f00000003c0)="681b7397c305ba7ff3a311755ce6ca5d719de0f425eeca6c9c6839d11d9127a9f10e733776f6d1153a2db8d503c2bfbb9948c48e2ad0b3be8fd30b4846e3201a5e23e976d5075f7ef1f726e9dd01dd8d308c1b3f78d1ff1f1cbed5d5cbd4501224b19ae30464bb5191a1a160fc19636907c2ac4a076dc6a8f674b3645888c413d514bc24ab007cab90c7790674dcb4a309571df6917ba8453bd9ce9575e2b27b0cea4b9b552075042fb79ba19d7a415ea89b10", 0xb3, 0xfff, 0x0, 0x1}, &(0x7f00000004c0)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000018c0), 0x105200, 0x0) 15:30:52 executing program 5: ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000000)={0x0, 0x1ff, 0x8798}) mq_timedsend(0xffffffffffffffff, &(0x7f0000000040)="48f82bdea935cfba16267b6f7306e05a79674cd19b67f551", 0x18, 0x6, &(0x7f0000000080)={0x0, 0x989680}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) syz_io_uring_setup(0x20f, &(0x7f0000000100)={0x0, 0xc87d, 0x20, 0x2, 0x52, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) write$selinux_attr(r0, &(0x7f0000000200)='system_u:object_r:system_dbusd_var_lib_t:s0\x00', 0x2c) r1 = accept4$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000003c0), 0x1e5dc0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000480)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x80, r1, &(0x7f00000002c0)="8a409233828523bdcd6d501faa5e1460f31273cb0e90f906deeaa187a3e4d01b9eb516edcf920909c5f9366342524eccc49ff4ff3cf3dceb24521763b412c9fa06889edda15de61e84b61e520f8fbe63ea33743cb3fa7c13448db3cab1c1f282d058de3c599c4dee20a44fac6d2a98440c797b0776b4a9eb851fd7d6e6436e6a1db16e60f8ec9ddc062899df0f4d6e3d66de46670f14ad1ac6104fa708252a7462c043e34ecf5bcbc574dfee79561dc46553cc34", 0xb4, 0x0, 0x0, 0x0, r0}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2, 0x7, r2, &(0x7f0000000400)="ad71d632f4", 0x5, 0x9, 0x0, 0x2, r0}]) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000004c0)={0x0, 0x0, 0xffffffffffffffff, 0x4}) r3 = io_uring_setup(0x4c8e, &(0x7f0000000500)={0x0, 0x9d84, 0x1c, 0x2, 0x2fa, 0x0, r0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000580)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) io_setup(0x7, &(0x7f0000000880)=0x0) io_submit(r6, 0x4, &(0x7f0000000cc0)=[&(0x7f0000000940)={0x0, 0x0, 0x0, 0x5, 0x20, r2, &(0x7f00000008c0)="0da7c1c104a5bdd590baa52dbb623f18626a0ce931f33251569345f0511a79fe9b84fe019489a72822f092ebc936812f4bca334d984b0afa9ab7443a32564ab3427a56d4be44a70e103ff44f", 0x4c, 0x7, 0x0, 0x1, r2}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x6, 0x5, r1, &(0x7f0000000980)="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", 0xfb, 0x4}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, &(0x7f0000000b00), 0x0, 0x100000001, 0x0, 0x1, r2}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x7, 0x3, r3, &(0x7f0000000b80)="0fb2829617d6993a6e18a9a36c5f43050533b08bc7362076e39b70219615a58b12d72664b5d794fbd2a176080c971cbbb0ce3a88e6b464201baaf13a6e51580988cfcdc7e39e4da737461f51cbac8d01cb8878d9452ca6b4ef0b6f3f105030e735dc59320c4991e0ae5af33c0dcd7092cd9f37ce3cc31bcb68f890b691423dbed08603901f801187de00cf68cbad3ff6ae9b0d574fd449081867438ba72b42721b2bcea6a318c7651b57095358324f5eb068e6efea560341535a3fea74ca1e7825ab68c3a290e3e8a85bca958f065713cc53cb7db904e3a7933a06b7c00fe7b1d632c2c313b496", 0xe7, 0x1, 0x0, 0x1, r0}]) 15:30:52 executing program 1: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"d4c0cadc7862c32b72c9fd760c05ca23", 0x0, 0x0, {0x0, 0x8}, {0x3ff}, 0x1000, [0x6, 0x9, 0x100000000, 0x35e3, 0x200, 0x2, 0xffffffffffff7fff, 0x10000, 0x8, 0x4, 0xff, 0x7049b48f, 0xfff, 0xffffffffffffff01, 0x7, 0x10000]}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3}, 0x1) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"87ccb543c14d08e63a7b0ba432b0a614", r0, r0, {0x7, 0xffffffff}, {0x5, 0x333e}, 0x8, [0x0, 0x4, 0x10001, 0x6, 0x800, 0x3, 0x7, 0x5d, 0x16b7, 0x9, 0x8d76, 0xfffffffffffffff9, 0x0, 0x4, 0x80, 0x5]}) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14, 0x80000) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@ipv4={'\x00', '\xff\xff', @empty}, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5, 0x0, 0x401, 0x100, 0x2, 0x40000040, r2}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@rand_addr=' \x01\x00', @mcast1, @loopback, 0x8, 0x3, 0x5, 0x0, 0x3, 0x0, r2}) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000003c0), 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000440)={{0xa, 0x4e20, 0x1ff, @local, 0xb07f}, {0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffffffff}, 0x7f, [0x8, 0xfffff801, 0x5, 0xef, 0x7fffffff, 0x581, 0x2, 0xc6b5]}, 0x5c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000c80)={0x3b, 0xd, '\x00', [@enc_lim={0x4, 0x1, 0x7f}, @ra={0x5, 0x2, 0x7f}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x38, {0x2, 0xc, 0x7f, 0x4, [0x2, 0x3, 0xffffffffffff896e, 0x3, 0xf17, 0x400]}}, @ra={0x5, 0x2, 0x1}, @jumbo={0xc2, 0x4, 0x4}, @enc_lim, @jumbo={0xc2, 0x4, 0x2d}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, 0x78) VM DIAGNOSIS: 15:30:47 Registers: info registers vcpu 0 RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff888009027898 R8 =0000000000000001 R9 =000000000000000a R10=000000000000002e R11=0000000000000001 R12=000000000000002e R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffd7cfb6080 CR3=000000000dc72000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 00000000ff000000 0000000000000000 YMM01=0000000000000000 0000000000000000 636f6c63006b6165 6c6d656d6b2f6775 YMM02=0000000000000000 0000000000000000 0000000000ffffff ff00000000000000 YMM03=0000000000000000 0000000000000000 0000ff0000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffff000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=1ffff1100310cea7 RCX=ffffffff812a241f RDX=dffffc0000000000 RSI=0000000000000002 RDI=0000000000000000 RBP=ffffffff849ec800 RSP=ffff8880188674d8 R8 =0000000000000000 R9 =ffffffff85b06ed7 R10=fffffbfff0b60dda R11=0000000000000001 R12=0000000000000001 R13=ffffffff849ec7c0 R14=ffffffff854c4cc0 R15=0000000000000000 RIP=ffffffff8425411e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f6be0e07900 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6be02a1350 CR3=000000000ecf4000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM01=0000000000000000 0000000000000000 3030623438613630 3638616663356134 YMM02=0000000000000000 0000000000000000 3830306234386136 3036386166633561 YMM03=0000000000000000 0000000000000000 2f6c616e72756f6a 2f676f6c2f6e7572 YMM04=0000000000000000 0000000000000000 b198571852e96357 00000000000af320 YMM05=0000000000000000 0000000000000000 d3fdd5f48436fbd7 00000000000aead0 YMM06=0000000000000000 0000000000000000 b181dcd0f4f25505 00000000000ae988 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 44495f474f4c5359 530069253d595449 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0020000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000